The Managing Director of Cyber Security Consulting at Verizon discussed the recent adoption of the first-ever cybersecurity rule by the Securities and Exchange Commission (SEC). The rule requires companies to report any material cybersecurity incidents within four business days. While this rule may not completely revolutionize cybersecurity on Wall Street, it does signify a shift in focus towards cybersecurity in the business community.
In the past, CFOs have been somewhat removed from working closely with chief information security officers (CISOs) due to the constant market fluctuations that demand their attention. However, the increasing frequency and cost of cyber attacks in recent years have highlighted the importance of cybersecurity for financial institutions.
The new SEC rule, while not a comprehensive solution, is a step in the right direction towards greater transparency and accountability in cybersecurity. Companies now face pressure to take a proactive approach to cybersecurity to avoid legal action and financial penalties for failing to disclose security incidents.
In addition to SEC compliance, financial institutions should prioritize basic cybersecurity measures such as multi-factor authentication and employee training on best practices. With the growing threat of cyber attacks and costly breaches, investing in cybersecurity is not just a protective measure but also a strategic growth strategy for financial institutions.