SEC Requires Financial Institutions to Issue Cyber Incident Plans

The updates to the regulations signal the SEC’s intention to draw a hard line on cyber breach reporting and notification.