This course examines the SEC's 2020 interpretive guidance and 2023 proposed rulemaking on cybersecurity, offering a structured walkthrough of what each framework requires from public companies. It addresses the core pillars of the SEC's regulatory approach: risk management program expectations, timely and consistent incident disclosure, and ongoing governance obligations at the board and executive level. As the SEC moves toward more prescriptive cybersecurity rules, understanding the distinction between current guidance and proposed requirements is essential for companies managing disclosure risk. This course translates regulatory language into practical terms, helping professionals across legal, security, and executive functions align their roles with evolving compliance obligations.
Board members, executives, CISOs and security teams, and legal advisors at public companies or organizations subject to SEC oversight will benefit most from this course.
None — designed for non-technical professionals, though a basic familiarity with public company governance or securities compliance is helpful.
1. Cheat Sheet: SEC Cybersecurity Guidance and Proposed Rules
In this seminar, our expert panelists begin by giving an overview of the SEC and its role, as well as cybersecurity and the SEC Crypto Assets and Cyber Unit. Next, our speakers review the 2020 SEC Cybersecurity Guidance, followed by a discussion of the 2023 SEC Proposed Rules and the requirements that they are expected to impose. Finally, our experts reflect on the potential impacts of this regulatory development on businesses and what they can expect. Topics covered in this webinar: Overview of the SEC and Cybersecurity 2020 SEC Cybersecurity Guidance 2023 SEC Proposed Rules Potential Impact of Regulations on Businesses
Free preview
Securities LawThis session reviews notable SEC enforcement actions in 2023 against cryptocurrency platforms including Binance, Kraken, and Coinbase, and examines the key legal and regulatory issues those cases raised. Panelists also discuss a bipartisan Senate bill targeting DeFi protocol regulation and offer observations on what 2023's developments may signal for the regulatory landscape going forward.
Daniel B. Garrie
Securities LawPanelists explain the background and intent of the SEC's 2023 cybersecurity rules, covering reporting requirements and the responsibilities of management and the board. They also address the tension between mandatory disclosure and protecting trade secrets, and offer practical guidance for corporations working to implement the rules.
Daniel B. Garrie
Securities LawA panel examines the SolarWinds cyberattack, the regulatory response it prompted—including Executive Order 14028 and the SEC's 2023 cybersecurity disclosure rules—and the significance of the June 2023 Wells Notice, which was the first to name a CISO directly. The discussion covers what this means for executive accountability and offers practical guidance for organizations navigating similar risks.
Daniel B. Garrie