SEC Set To Adopt New Cyber Rule, Unveils Brokerage AI Proposal (reuters.com) 5
Wall Street's top regulator on Wednesday was poised to adopt new rules requiring publicly traded companies to disclose hacking incidents, a measure officials said was being taken to help the investing public contend with the mounting cost and frequency of cyber attacks. From a report: The five-member U.S. Securities and Exchange Commission was also set to issue a proposal governing potential conflicts of interest in broker-dealers' use of artificial intelligence, a reform partly influenced by the events of the 2021 "meme stock" rally when officials found robo-advisers and brokers used AI and game-like features to drive trading. If adopted, the cybersecurity rule would require companies to disclose a cyber breach within four days after determining it is serious enough to be material to investors. The rule would allow delays if the Justice Department deems them necessary to protect national security or police investigations, according to the SEC.
Companies will also have to describe periodically what efforts they are making to identify and manage threats in cyberspace. The rule, first proposed in March of 2022, forms part of a broader SEC effort to harden the financial system against data theft, systems failure and cyber-intrusions. Ahead of the vote, SEC officials said that in response to public comments they had trimmed certain parts of the proposal, removing a requirement for companies to disclose board members' expertise in cybersecurity and narrowing the definition of what information must be disclosed. The AI proposal, if issued by the commission, would require broker-dealers to "eliminate or neutralize" any conflict of interest that occurs if a trading platform's predictive data analytics puts the broker's financial interest ahead of that of the firm's clients.
Companies will also have to describe periodically what efforts they are making to identify and manage threats in cyberspace. The rule, first proposed in March of 2022, forms part of a broader SEC effort to harden the financial system against data theft, systems failure and cyber-intrusions. Ahead of the vote, SEC officials said that in response to public comments they had trimmed certain parts of the proposal, removing a requirement for companies to disclose board members' expertise in cybersecurity and narrowing the definition of what information must be disclosed. The AI proposal, if issued by the commission, would require broker-dealers to "eliminate or neutralize" any conflict of interest that occurs if a trading platform's predictive data analytics puts the broker's financial interest ahead of that of the firm's clients.
Define "hacking" (Score:2)
While this may be viewed as a "good thing" overall, I'd first like the lawyers to define "hacking".
That way you'll know just how bad it has to get for Greed to admit any-fucking-thing.
Directions unclear: TMI (Score:2)
I don't want to know how the SEC does cybering. They should just get real live dates and leave the cybering rules to Cosmo.
In other news, there are pervasive disincentives to intrusion reporting. Only if the penalties for not reporting them were immense would the path of least resistance be taken in the favor of ethical technical operations.