Is It Possible to Disclose a Cyberattack in 4 Days? — SEC Roundup

Welcome to SEC Roundup, a bimonthly video series by Paul Hastings partners and former Securities and Exchange Commission senior trial counsels Nick Morgan and Tom Zaccaro exploring current SEC topics with thought leaders and industry experts.

In this episode, Morgan and Zaccaro talk with John Reed Stark, former chief and founder of the Securities and Exchange Commission's Office of Internet Enforcement who's now president of John Reed Stark Consulting, about the SEC's proposed rule requiring public companies to report material cybersecurity incidents within four days.

"The SEC has said that any data security incident, because the definition is very broad, is going to be material," Stark says.