SEC cyber rule could trigger more attacks, experts warn

Mandatory disclosure of cyber risks and attacks could help hackers

US Securities and Exchange Commission, Washington, DC
US Securities and Exchange Commission, Washington, DC

A new rule requiring US asset managers to disclose more information about cyber attacks could be a boon for hackers, critics of the proposal warn.

Investment firms must report any “significant cyber-security incidents” to the US Securities and Exchange Commission (SEC) within 48 hours and “promptly” inform clients of any breaches under a rule proposed by the regulator on February 9.

Cyber-security experts say these disclosures may expose compromised firms to further attacks when they are most

Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.

To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe

You are currently unable to copy this content. Please contact info@risk.net to find out more.

Sorry, our subscription options are not loading right now

Please try again later. Get in touch with our customer services team if this issue persists.

New to Risk.net? View our subscription options

Register

Want to know what’s included in our free membership? Click here

This address will be used to create your account

You need to sign in to use this feature. If you don’t have a Risk.net account, please register for a trial.

Sign in
You are currently on corporate access.

To use this feature you will need an individual account. If you have one already please sign in.

Sign in.

Alternatively you can request an individual account here