SEC Declines to Require Identification of Cybersecurity Expertise on Board

Barnes & Thornburg – The SEC recently adopted final rules requiring the disclosure of material cybersecurity incidents and cybersecurity risk management, strategy, and governance by public companies, but it removed a controversial proposal to require disclosure of whether any member of the board of directors has cybersecurity expertise.