United States

SEC Cybersecurity Disclosure Rule

30 controls. 1 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

30 controls 1 frameworks share controls with it United States verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you runShared controls
NIST Cybersecurity Framework 2.020measure it →

Every control

CodeControlAlso in
SEC-CYB-01Material Cybersecurity Incident Determination1
SEC-CYB-02Form 8-K Item 1.05 Filing within Four Business Days1
SEC-CYB-03National Security or Public Safety Delay Coordination1
SEC-CYB-04Updating Disclosures for Material Information Not Yet Determined1
SEC-CYB-05Related Occurrences and Aggregation0
SEC-CYB-06Risk Management and Strategy Disclosure1
SEC-CYB-07Material Effects of Cybersecurity Threats Disclosure1
SEC-CYB-08Board Oversight of Cybersecurity Risks1
SEC-CYB-09Management Role and Expertise in Cybersecurity1
SEC-CYB-10Periodic Filing Inline XBRL Tagging0
SEC-CYB-11Foreign Private Issuer Disclosures on Form 6-K and 20-F1
SEC-CYB-12Disclosure Controls Tailored to Cybersecurity1
SEC-CYB-13Incident Response Plan Alignment with Disclosure Obligations1
SEC-CYB-14Insider Trading Window Considerations for Cyber Incidents0
SEC-CYB-15Third Party Service Provider Cybersecurity Risk Oversight1
SEC-CYB-16External Counsel and Forensic Engagement Protocols1
SEC-CYB-17Coordination with Other Regulatory Notifications1
SEC-CYB-18Historical Incident Tracking and Repeat Disclosure Analysis1
SEC-CYB-19Training for Material Cybersecurity Disclosure Decision Makers0
SEC-CYB-20Recordkeeping for Cybersecurity Materiality Determinations0
SEC-DEFINITIONSDefinitions: Cybersecurity Incident, Threat, Information Systems0
SEC-ENFORCEMENTEnforcement Posture (SolarWinds Precedent and Beyond)0
SEC-REG-S-PRegulation S-P Customer Notification Coordination1
SEC-REG-SCIReg SCI Coordination for Covered Entities0
SEC-SAFE-HARBORLimited Safe Harbor for Item 1.05 Late Filings0
SEC-SCA-SUB-FILERSmaller Reporting Company Extended Compliance Date0
SECCYB-1Material Cybersecurity Incident 4-Business-Day Disclosure (Item 1.05)1
SECCYB-2Risk Management Processes (Item 106(b))1
SECCYB-3Governance (Item 106(c)) - Board and Management Oversight1
SECCYB-4Disclosure Process Integration and Materiality Workflow1

Tell me when SEC Cybersecurity Disclosure Rule files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for SEC Cybersecurity Disclosure Rule, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition