Securities and Exchange Commission (SEC)

The SEC mandates that public companies disclose cybersecurity risks and material breaches. It enforces safeguards for digital assets, scrutinizes crypto platforms, and holds companies accountable for insufficient cybersecurity governance, especially under Regulation S-P and Regulation SCI.

SEC compliance refers to adhering to rules regarding disclosure, trading practices, financial reporting (e.g., 10-Ks and 8-Ks), and cybersecurity risk management. This applies to publicly traded companies, brokers, investment advisers, and funds.

Requirements include accurate and timely financial disclosures, risk factor reporting, adherence to investor protection rules, and in some cases, maintaining cybersecurity incident response plans. Non-compliance can lead to investigations, fines, and delisting.