Sec. 6. Reporting to shareholders of cyber risks and cyber incidents
95 words·~1 min read·
/bill/113/s/1638/is/section-6A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
Not later than 180 days after the date of enactment of this Act, and annually thereafter for 3 years, the Securities and Exchange Commission, in consultation with the Secretary of Commerce and the Secretary of Homeland Security, shall submit to Congress a report— assessing the reporting of cyber risk or cyber incidents in financial statements by issuers of securities; and evaluating relevant Commission actions, including the staff guidance issued by the Commission on October 13, 2011. A report submitted under this section shall not include proprietary or sensitive business information or identify any individual issuer.