Erik Gerding, Director, Division of Corporation Finance has published the following comment on the US Securities Commission's requirements on disclosing cybersecurity incidents:

The Commission's cybersecurity rules mandate public companies to disclose material cybersecurity incidents under Item 1.05 of Form 8-K. If a company discloses a cybersecurity inciden