SEC Issues First-Ever Penalties for Deficient Cybersecurity Risk Controls

The Securities and Exchange Commission has launched a stunning salvo across the bows of public companies with its announcement of civil monetary penalties and a cease-and-desist order against First American Financial Corporation (FAFC) for deficient disclosure controls and procedures related to cybersecurity risks.