2
U.S. rule requires public companies to disclose cybersecurity breaches in 4 days (www.ctvnews.ca)
submitted 3 years ago by [M, B] to c/technology@lemmy.world
5 comments fedilink hide all child comments
 

U.S. rule requires public companies to disclose cybersecurity breaches in 4 days::The Securities and Exchange Commission adopted rules Wednesday to require public companies to disclose within four days all cybersecurity breaches that could affect their bottom lines. Delays will be permitted if immediate disclosure poses serious national security or public safety risks.

you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 3 years ago (1 child)

4 days!? That's awfully fucking generous. I would have made the requirement at 24 hours because fuck corporations.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 1 point 3 years ago

    Eh I disagree. You have to give companies time to patch their shit. If they disclose hours or days before they have time to patch that can lead to another breach assuming the vulnerability is shared.

    But yes fuck Corporations.

  • permalink
  • fedilink
  • source
  • parent