A wide range of topics are covered in the Securities and Exchange Commission’s (“SEC”) 2024 Examination Priorities,1 published late last year. Taking into consideration this year’s priorities, recent rules and a rapidly changing regulatory landscape, our experts discuss what to expect in the following three areas: artificial intelligence (“AI”), cybersecurity and environmental, social and governance (“ESG”).
The SEC notes that “cybersecurity remains a perennial focus area for all registrants.”4 Recent rules requiring a 72-hour disclosure window following a materiality designation and annual disclosures5 of risk mitigation and board governance strategies bring organizational responses and preparedness efforts into the spotlight. The SEC’s enforcement actions6 against Solar Winds and the company’s chief information security officer (“CISO”) indicate that less-than-forthcoming communications disclosure strategies could expose organizations to accusations of securities fraud — particularly with respect to misrepresenting or mischaracterizing the severity of a cybersecurity incident or their level of information security and preparedness.
What It Means
Organizations will likely remain hesitant to publicize at an early stage whether an incident has a significant impact on current or future revenues and it may take time for them to factor in reputation risk and loss of customer or investor trust into their determinations. It is possible that the SEC will continue to interpret poorly considered or excessively risk-averse communications strategies as misrepresentations, meaning that organizations must have effective strategies in place ahead of an incident.
Organizations should waste no time in considering how they will respond to an incident and how holistic strategies should flow from their decisions around filing, as publicly reporting an ongoing incident may significantly alter crisis communications considerations. They should consider how their risk mitigation and governance strategies will be viewed by the public and the media and have plans in place to mitigate negative scrutiny.
The views expressed in this article are those of the author(s) and not necessarily the views of FTI Consulting, its management, its subsidiaries, its affiliates, or its other professionals.
We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept All”, you consent to the use of ALL the cookies. However, you may visit "Cookie Settings" to provide a controlled consent.
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Cookie
Duration
Description
cookielawinfo-checkbox-analytics
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional
11 months
The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy
11 months
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.