The Managing Director of Cyber Security Consulting at Verizon recently discussed the Securities and Exchange Commission’s (SEC) new cybersecurity rule, which requires companies to report material cybersecurity incidents within four business days. While the rule may not revolutionize cybersecurity on Wall Street, it signifies a shift in focus towards cybersecurity in the business community.
In the past, CFOs have been somewhat removed from day-to-day interactions with chief information security officers (CISOs) due to the market’s volatility and competitive challenges. However, the increasing frequency and cost of cyberattacks, such as ransomware, highlight the importance of prioritizing cybersecurity in financial institutions.
The new SEC rule emphasizes disclosure and transparency, encouraging companies to take a proactive approach to cybersecurity. In addition to SEC compliance, financial institutions should implement basic security measures like multi-factor authentication and provide employees with cybersecurity training to mitigate human error.
Cybersecurity is not just an insurance policy but also a growth strategy for financial institutions as online banking and cloud adoption expand. By investing in cybersecurity, companies can protect themselves from potential security incidents and strengthen their overall security posture.