SEC Cybersecurity Rules

How Tenable can help publicly traded companies meet the new requirements

The new SEC Ruling requires publicly traded companies (including foreign private issuers) to submit annual disclosure of their cyber security risk management process and role of board oversight.

Effective for annual reports filed after December 15th, 2023 companies will need to submit a variety of disclosures regarding their cybersecurity and risk management processes, board oversight and material cyber incidents. The reports need to include the following information:

• Process for assessing, identifying and managing material risks from cyber threats
• Role of the Board in overseeing cyber threats
• Management’s oversight role and cyber expertise

Preparation of these disclosures may prove difficult as security data typically resides in many different silos and oftentimes is not designed for consumption by non-technical personnel. Tenable can help you prepare to meet the requirements of the SEC ruling and generate the required disclosures. This solution brief provides details on how Tenable technologies can help.