Navigating the SEC Cyber Regulations and 8K reporting for smaller entities

On June 15, 2024, half a year after the SEC's cybersecurity regulations were enacted, smaller organizations—those with a public float under $250 million or annual revenue under $100 million—were finally subject to report material cyber events on Form 8-K, Line 1.05. However, as the larger entities have already demonstrated, determining materiality can be complex, requiring stakeholders to consider financial loss, compromised data records, operational impacts, and more.

The Challenge

The SEC's ambiguous definition of material impact has led to non-compliant disclosures among larger organizations. Smaller entities now face similar challenges and need clear, defensible thresholds for materiality.

The Solution

Smaller entities can leverage quantitative loss thresholds to streamline materiality determination. For instance, using one basis point of revenue as a benchmark can simplify the process. Kovrr's Materiality Analysis feature in our CRQ platform helps calculate this loss threshold and several others, along with their likelihood of occurrence, ensuring not only that disclosures are submitted without unreasonable delay but also that corporate leaders are well-prepared to defend their filing decisions.

In this webinar, you will learn how to:

• Understand and apply SEC's material cyber event reporting requirements.
• Utilize quantitative benchmarks for determining materiality.
• Defend your materiality decisions to investors and regulatory bodies.
• Leverage Kovrr’s Materiality Analysis feature for effective and compliant disclosures.