SEC adopts cybersecurity risk management rules

The Securities and Exchange Commission adopted rules requiring registrants to disclose cybersecurity incidents and to annually disclose information regarding their cybersecurity risk management, strategy, and governance. The commission also adopted rules requiring foreign private issuers to make comparable disclosures.