09
In response to the increasing number of cyberattacks, the U.S. Securities and Exchange Commission’s Division of Corporation Finance recently issued guidance on the disclosure obligations of companies relating to cybersecurity risks and cyber incidents. While the purpose behind the action was well founded, this article argues that the guidelines are inadequate because they fail to …