Banking lobbyists are pushing to weaken the SEC's four-day cybersecurity reporting rule, which has worked smoothly since it started a year and a half ago. The speaker says they want to hide incidents, control the narrative, and dodge accountability rather than invest in actual security.
Chapters
I find this attempt to undermine the SEC 4-day reporting rule to be absolutely shameful. In the year and a half since its implementation, we have not seen any major issues resulting from these disclosures. It has provided fairness in markets with investors and given timely notice to potential victims. These lobbying organizations are blatantly putting forth weak arguments because that's all they have, in hopes that their industry can better conceal material cybersecurity incidents, manage negative public narratives, and ultimately minimize accountability and proper cybersecurity investments. Business leaders and cybersecurity professionals should see this for what it is: a shady move to protect image and profits at the expense of transparency, fairness, security, and public trust.