The expanded SEC Rule 17 covering Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure requires public companies to disclose material information on an annual basis regarding their cybersecurity risk management, strategy, and governance.

This guide provides practical advice for CISOs on formulating a game plan for the new rule, including:

• Why cyber risk is enterprise risk
• What operational risk is and how OT and IoT systems play a role
• Tips for educating your board on cybersecurity
• Key definitions and thresholds to establish with your CFO, legal team and other executive stakeholders