The Managing Director of Cyber Security Consulting at Verizon recently discussed the Securities and Exchange Commission’s (SEC) first-ever rule for cybersecurity. The rule requires companies to report any material cybersecurity incidents within four business days. While this rule won’t revolutionize cybersecurity on Wall Street, it does signal a shift in perception towards giving cybersecurity the attention it deserves.
In the past, CFOs may have been removed from day-to-day work with chief information security officers (CISOs) due to the challenges of competing in volatile markets. However, overlooking cybersecurity is no longer a luxury that companies can afford.
Recent years have seen staggering breaches across financial institutions, credit card companies, and lenders, resulting in significant financial losses and compromised customer information. The rising cost of cybersecurity breaches, particularly ransomware attacks, is a growing concern for the financial sector.
The new SEC cybersecurity rule focuses on disclosure, requiring companies to report incidents and responses to the SEC within four days. While the rule doesn’t prescribe specific cybersecurity practices, it promotes transparency and accountability in cybersecurity efforts.
Financial institutions can enhance their security measures by implementing multi-factor authentication and providing employees with cybersecurity best practices training. Cybersecurity is not just an insurance policy but also a growth strategy for financial services.
Forbes Technology Council is an exclusive community for top CIOs, CTOs, and technology executives. To see if you qualify to join, visit their website.