New SEC cybersecurity rules put more onus on the CISO, not so much on directors

With the SEC's adoption of new rules on cybersecurity risk management, strategy, governance, and incident disclosure by public companies, one thing is clear: better definitions are required.