Authentic statutory obligations decomposed into atomic machine-actionable conditions, actions, and verification standards.
Registrants must disclose any cybersecurity incident they determine to be material on Form 8-K within four business days of determining that the incident is material. Registrants must describe the nature, scope, and timing of the incident, and the material impact or reasonably likely material impact on the registrant's financial condition and results of operations.
