Here is an issue to focus on as we draw to the end of the second quarter and plan our periodic reporting.<\/p>\n
Rarely does a month pass without dramatic news stories about cybersecurity breaches.\u00a0 Targets include large companies such as Equifax, not-for-profits such as hospitals and even government agencies like the SEC.<\/p>\n
Earlier this year the SEC augmented their 2011 cybersecurity disclosure guidance in CorpFin Disclosure Topic Two<\/a>with a formal Commission Release<\/a>.\u00a0 As we blogged<\/a>,the Release in large part reinforced the Disclosure Topic Two guidance and added guidance about control and insider trading issues.<\/p>\n When the SEC issues new guidance one of the ways they sometimes emphasize its importance is with an enforcement case.\u00a0 And, that has happened here.\u00a0 Altaba, Inc, which was formerly Yahoo, has been fined $35 million for failure to make timely and accurate disclosures about their major cybersecurity breach.\u00a0As you may have read, there was a significant delay in disclosure of the breach on the part of Altaba (Yahoo), and the enforcement release highlights several other disclosure issues surrounding the breach, including the fact that Yahoo\u2019s disclosure controls and procedures were not effective.\u00a0 Here is a quote from Jina Choi, the San Francisco Regional Office Director:<\/p>\n \u201cYahoo\u2019s failure to have controls and procedures in place to assess its cyber-disclosure obligations ended up leaving its investors totally in the dark about a massive data breach.\u00a0\u00a0Public companies should have controls and procedures in place to properly evaluate cyber incidents and disclose material information to investors.\u201d<\/p>\n You can read details here<\/a>.<\/p>\n As always, your thoughts and comments are welcome!<\/p>\n","protected":false},"excerpt":{"rendered":" Here is an issue to focus on as we draw to the end of the second quarter and plan our periodic reporting. Rarely does a month pass without dramatic news stories about cybersecurity breaches.\u00a0 Targets include large companies such as Equifax, not-for-profits such as hospitals and even government agencies like the SEC. Earlier this year … Continue reading Faulty Cybersecurity Disclosures and a Big Fine<\/span>