SEC Will Require Finance to Notify Breach Victims in 30 Days
More SEC rules, this time mandating financial firms inform victims of data breaches
within 30 days!
Why wasn't this already a requirement?
Last year, the SEC instituted requirements for publicly traded companies to inform investors of material cybersecurity events within 4 days. That edict spurred a small wave of misguided protests in the #cybersecurity community, who warned of bad omens which never materialized.
I am anxious to see if this latest
regulatory requirement also becomes a hotbed of discussion. <popcorn at the
ready>
Keeping people in the dark is not okay.