Pending Cyber-Risk Reporting Rules Signal Stricter Enforcement

New Securities and Exchange Commission rules planned for how public companies report on cybersecurity signal regulatory pressure on risk oversight following a spate of high-profile, high-cost hacks.

The SEC is considering a proposal as it reportedly investigates how companies responded to last year’s SolarWinds Corp. hack, including whether they made proper disclosures to investors.

SolarWinds also faces its own investigations from the SEC, the Justice Department, and other government authorities.

In another post-leak, regulatory action, the commission recently settled cyber-reporting-related charges against real estate settlement services company First American Financial Corp, which must pay a nearly $500,000 penalty after ...