Comment Letter to Proposed Rule – Cybersecurity Risk Management, Strategy, Governance and Incident Disclosure
We write in support of the purpose and the direction of, while also providing specific comments and further recommendations with respect to, the abovementioned Proposed rule to require (i) current reporting about material cybersecurity incidents, as well as updates; and (ii) disclosures about risk management, strategy, and governance as related to cybersecurity, as published in 87 Federal Register 16,590, dated March 23, 2022 (the “Proposed Disclosure Rules”) by the Securities and Exchange Commission, for which comments are requested by May 9, 2022.