On March 9, the SEC proposed Cybersecurity rules for public companies that if adopted, would impose substantial new reporting obligations for material cybersecurity incidents and cybersecurity risk management, strategy, and governance.
A copy of the proposed Rules can be found at