On March 9, 2022, the U.S. Securities and Exchange Commission (SEC) proposed rules on cybersecurity risk management, strategy, governance, and incident disclosure by public companies. The proposed rules would require, among other things, periodic disclosures about a company’s policies and procedures to identify and manage cybersecurity risks. 

Cybersecurity disclosure requirements

The SEC’s fact sheet notes…