OR
At the end of 2023 , a new SEC regulation ordered all public-listed companies to disclose material cybersecurity incidents within four days . This is to safeguard investors and market integrity , but there was some confusion over what a ‘ material incident ’ even is .
“ The definition is somewhat vague , but according to TSC Industries , Inc . v . Northway , Inc ., an incident is material if ‘ there is a substantial likelihood that a reasonable shareholder would consider it important in making an investment decision ’,” says Vishal Gauri , the Chief Strategy Officer at Seclore , a data-centric security company that protects and controls digital assets to help enterprises prevent data theft and achieve compliance .
The SEC regulation incited quite a bit of buzz across the security industry when it was announced .
“ There ’ s certainly value in this new rule , namely that it will help standardise cybersecurity risk reporting and provide more transparency for investors and stakeholders who ought to know about significant security-related events of public companies ,” says Gauri . “ But it ’ s not without its complications . For one , there ’ s a grey area when it comes to what exactly qualifies as a material incident . In addition , the four-day time frame is very narrow .”
Here , he tells us more about recent cybersecurity acts and the future of chip manufacturing .
Cybersecurity wake-up call for manufacturers “ I ’ ve worked at several tech companies over the past 20 years ,” says Gauri .
manufacturingdigital . com 105