{"id":5973,"date":"2023-11-01T11:18:51","date_gmt":"2023-11-01T16:18:51","guid":{"rendered":"https:\/\/www.bbrown.com\/?post_type=insight&#038;p=5973"},"modified":"2023-11-01T11:18:51","modified_gmt":"2023-11-01T16:18:51","slug":"sec-issues-new-cyber-rules-how-do-they-impact-your-company","status":"publish","type":"insight","link":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/","title":{"rendered":"SEC Issues New Cyber Rules: How Do They Impact Your Company?"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row row_style=&#8221;page-hero&#8221; full_width=&#8221;stretch_row_content&#8221;][vc_column]\n\t<div class=\"hero hero--wrap    \">\n\n\t\t<div class=\"hero--background-image hero--background-image-blur\">\n\t\t\t<div class=\"hero--overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"hero-background\" style=\"background: url(https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg) center center no-repeat; background-size: cover;\"><\/div>\n\t\t\t\t\t<\/div>\n\n\t\t<div class=\"hero--container\">\n\t\t\t<div class=\"container\">\n\t\t\t\t<div class=\"hero--inner width-100\">\n\n\t\t\t\t\t\n  <div class='content-heading  100%  '>\n    <p class='text-white subheading'>Property &amp; Casualty<\/p>\n    <h1 class='text-white    '>\n      SEC Issues New Cyber Rules: How Do They Impact Your Company?\n    <\/h1>\n\t\n  <\/div>\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\t<\/div>\n\n\t\n[\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;2\/3&#8243;]\n  <div class='content-heading  100% content-heading--ruled '>\n    \n    <h1 class='text-brand-dark-blue    h2'>\n      SEC Issues New Cyber Rules: How Do They Impact Your Company?\n    <\/h1>\n\t\n  <\/div>[vc_column_text]On July 26, 2023, the Securities and Exchange Commission (SEC) voted to approve new cybersecurity incident disclosure rules. The new rules require all public companies to disclose specific information regarding cybersecurity incidents and details of their cyber risk management, strategy and governance to the SEC. Some key provisions of the new rules include:<\/p>\n<ul>\n<li><strong>Effective December 15, 2023:<\/strong> Mandatory disclosure of a material cybersecurity incident within four business days on Form 8-K<\/li>\n<li><strong>Effective December 18, 2023:<\/strong> Mandatory disclosure of cyber risk management, strategy and governance on Form 10-K<\/li>\n<li>\u201cMaterial\u201d is described as reflecting \u201ca substantial likelihood that a reasonable shareholder would consider it important\u201d while making an investment decision, or if it would have \u201csignificantly altered the \u2018total mix\u2019 of information available\u201d\n<ul>\n<li>Factors companies should consider include reputational harm, the likelihood of associated litigation or regulatory investigations and impact on competitiveness<\/li>\n<\/ul>\n<\/li>\n<li>The cyber risk management, strategy and governance disclosure is designed to allow investors to ascertain a company\u2019s cybersecurity practices, such as whether they have a risk assessment program in place, with sufficient detail for investors to understand the company\u2019s cybersecurity risk profile<\/li>\n<\/ul>\n<p>Prior to the new rules, corporate executives were involved in high-profile cases brought by the SEC involving alleged insufficient cyber incident disclosures, which resulted in significant fines and, in one case, criminal penalties. The new rules could increase the personal scrutiny on corporate officers and executives, such as CFOs.<\/p>\n<h4>How can you help protect your company from such exposures?<\/h4>\n<ol>\n<li><strong>Cyber Insurance<\/strong><br \/>\nCyber policies are designed to cover the incident itself but generally do not cover SEC actions or investor claims. Cyber policies generally exclude regulatory actions relating to securities laws and, in some cases, will specifically reference \u201cthe Securities Act of 1933, the Securities Act of 1934, the Investment Company Act of 1940, etc.\u201d In light of the new rules, we anticipate that carriers will begin to clarify their securities exclusions and may move to cover a cybersecurity regulatory enforcement action.<\/li>\n<li><strong> Directors and Officers Insurance<\/strong><br \/>\nD&amp;O policies are designed to cover a variety of claims against directors, officers and the company. Such claims can include SEC investigations, shareholder derivative actions and other related litigation, but typically involve some alleged breach or failure of duty of care. D&amp;O policies may contain cyber exclusions, and it is important to review the breadth of the exclusion \u2013 whether it excludes elements that are truly cyber coverages (breach costs, extortion payments, business interruption, etc.) or whether it is an \u201cabsolute\u201d exclusion that excludes anything relating to a cyber claim (which would then include SEC actions and shareholder derivative suits).<\/li>\n<\/ol>\n<h4>Conclusion<\/h4>\n<p>While the new rules could certainly increase scrutiny and possible exposure for companies and their executives, ensuring that you have robust insurance policies in place as part of your risk management portfolio can help provide a level of protection.[\/vc_column_text]\t<div class='wpb_content_element text-left btn-container'>\n\t\t\t\t\t<a class='btn btn-brand-green  '\n\t\t\t\thref='https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/11\/White-Paper-SEC-Cyber-Rules-\u2013-Brown-Brown-Web-1.pdf' target='_blank' data-toggle=''>\n\t\t\t\t<span class=\"btn-text-color--default\">Download PDF<\/span>\n\t\t\t<\/a>\n\t\t\t<\/div>\n[\/vc_column][vc_column width=&#8221;1\/3&#8243;][vc_single_image image=&#8221;986&#8243; alignment=&#8221;center&#8221; style=&#8221;vc_box_circle_2&#8243;][vc_separator border_width=&#8221;2&#8243; el_width=&#8221;60&#8243;][vc_column_text]<\/p>\n<h6 style=\"text-align: center;\">Cyber Team<\/h6>\n<p>[\/vc_column_text]\t<div class='wpb_content_element text-center btn-container'>\n\t\t\t\t\t<a class='btn btn-brand-dark-blue  '\n\t\t\t\thref='\/us\/contact\/contact-general\/' target='' data-toggle=''>\n\t\t\t\t<span class=\"btn-text-color--default\">Connect Now<\/span>\n\t\t\t<\/a>\n\t\t\t<\/div>\n[\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row row_style=&#8221;page-hero&#8221; full_width=&#8221;stretch_row_content&#8221;][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;2\/3&#8243;][vc_column_text]On July 26, 2023, the Securities and Exchange Commission (SEC) voted to approve new cybersecurity incident disclosure rules. The new rules require all public companies to disclose [&hellip;]<\/p>\n","protected":false},"author":66,"featured_media":5755,"template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"insight_category":[34],"class_list":["post-5973","insight","type-insight","status-publish","has-post-thumbnail","hentry","insight_category-property-casualty"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.0 (Yoast SEO v27.0) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SEC Issues New Cyber Rules: How Do They Impact Your Company? - Brown &amp; Brown<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SEC Issues New Cyber Rules: How Do They Impact Your Company?\" \/>\n<meta property=\"og:description\" content=\"[vc_row row_style=&#8221;page-hero&#8221; full_width=&#8221;stretch_row_content&#8221;][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;2\/3&#8243;][vc_column_text]On July 26, 2023, the Securities and Exchange Commission (SEC) voted to approve new cybersecurity incident disclosure rules. The new rules require all public companies to disclose [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/\" \/>\n<meta property=\"og:site_name\" content=\"Brown &amp; Brown\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/\",\"url\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/\",\"name\":\"SEC Issues New Cyber Rules: How Do They Impact Your Company? - Brown &amp; Brown\",\"isPartOf\":{\"@id\":\"https:\/\/www.bbrown.com\/us\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg\",\"datePublished\":\"2023-11-01T16:18:51+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#breadcrumb\"},\"inLanguage\":\"us\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"us\",\"@id\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#primaryimage\",\"url\":\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg\",\"contentUrl\":\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg\",\"width\":2560,\"height\":1600,\"caption\":\"Circle blue abstract technology innovation concept vector backgr\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.bbrown.com\/us\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Insights\",\"item\":\"https:\/\/www.bbrown.com\/us\/news-events\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SEC Issues New Cyber Rules: How Do They Impact Your Company?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.bbrown.com\/us\/#website\",\"url\":\"https:\/\/www.bbrown.com\/us\/\",\"name\":\"Brown &amp; Brown\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.bbrown.com\/us\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.bbrown.com\/us\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"us\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.bbrown.com\/us\/#organization\",\"name\":\"Brown &amp; Brown\",\"url\":\"https:\/\/www.bbrown.com\/us\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"us\",\"@id\":\"https:\/\/www.bbrown.com\/us\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2021\/12\/cropped-BBRetail002-RGBrevs.png\",\"contentUrl\":\"https:\/\/www.bbrown.com\/wp-content\/uploads\/2021\/12\/cropped-BBRetail002-RGBrevs.png\",\"width\":1000,\"height\":136,\"caption\":\"Brown &amp; Brown\"},\"image\":{\"@id\":\"https:\/\/www.bbrown.com\/us\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SEC Issues New Cyber Rules: How Do They Impact Your Company? - Brown &amp; Brown","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/","og_locale":"en_US","og_type":"article","og_title":"SEC Issues New Cyber Rules: How Do They Impact Your Company?","og_description":"[vc_row row_style=&#8221;page-hero&#8221; full_width=&#8221;stretch_row_content&#8221;][vc_column][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;2\/3&#8243;][vc_column_text]On July 26, 2023, the Securities and Exchange Commission (SEC) voted to approve new cybersecurity incident disclosure rules. The new rules require all public companies to disclose [&hellip;]","og_url":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/","og_site_name":"Brown &amp; Brown","og_image":[{"width":2560,"height":1600,"url":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/","url":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/","name":"SEC Issues New Cyber Rules: How Do They Impact Your Company? - Brown &amp; Brown","isPartOf":{"@id":"https:\/\/www.bbrown.com\/us\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#primaryimage"},"image":{"@id":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#primaryimage"},"thumbnailUrl":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg","datePublished":"2023-11-01T16:18:51+00:00","breadcrumb":{"@id":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#breadcrumb"},"inLanguage":"us","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/"]}]},{"@type":"ImageObject","inLanguage":"us","@id":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#primaryimage","url":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg","contentUrl":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2023\/10\/AdobeStock_352435645-scaled.jpeg","width":2560,"height":1600,"caption":"Circle blue abstract technology innovation concept vector backgr"},{"@type":"BreadcrumbList","@id":"https:\/\/www.bbrown.com\/us\/insight\/sec-issues-new-cyber-rules-how-do-they-impact-your-company\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.bbrown.com\/us\/"},{"@type":"ListItem","position":2,"name":"Insights","item":"https:\/\/www.bbrown.com\/us\/news-events\/"},{"@type":"ListItem","position":3,"name":"SEC Issues New Cyber Rules: How Do They Impact Your Company?"}]},{"@type":"WebSite","@id":"https:\/\/www.bbrown.com\/us\/#website","url":"https:\/\/www.bbrown.com\/us\/","name":"Brown &amp; Brown","description":"","publisher":{"@id":"https:\/\/www.bbrown.com\/us\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.bbrown.com\/us\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"us"},{"@type":"Organization","@id":"https:\/\/www.bbrown.com\/us\/#organization","name":"Brown &amp; Brown","url":"https:\/\/www.bbrown.com\/us\/","logo":{"@type":"ImageObject","inLanguage":"us","@id":"https:\/\/www.bbrown.com\/us\/#\/schema\/logo\/image\/","url":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2021\/12\/cropped-BBRetail002-RGBrevs.png","contentUrl":"https:\/\/www.bbrown.com\/wp-content\/uploads\/2021\/12\/cropped-BBRetail002-RGBrevs.png","width":1000,"height":136,"caption":"Brown &amp; Brown"},"image":{"@id":"https:\/\/www.bbrown.com\/us\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight\/5973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight"}],"about":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/types\/insight"}],"author":[{"embeddable":true,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/users\/66"}],"version-history":[{"count":0,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight\/5973\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/media\/5755"}],"wp:attachment":[{"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/media?parent=5973"}],"wp:term":[{"taxonomy":"insight_category","embeddable":true,"href":"https:\/\/www.bbrown.com\/us\/wp-json\/wp\/v2\/insight_category?post=5973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}