logo
episode-header-image
Sep 2023
36m 32s

Getting ready for the SEC’s new cybersec...

PWC
About this episode

Did you enjoy this episode? Text us your thoughts and be sure to include the episode name.

In this episode, we discuss the SEC’s new cybersecurity disclosure rules finalized in July. 

The new disclosure rules expand registrants’ annual disclosures and require timely reporting for material cybersecurity incidents. With these significant changes and the implementation approaching, companies should not wait to get ready. 


This week, Heather Horn is joined by Kyle Moffatt, PwC National Office Professional Practice Leader, and Matt Gorham, PwC Cyber & Privacy Innovation Institute Leader, to discuss what companies can do to prepare now for the new requirements.


In this episode, you’ll hear discussion of:

  • 4:28 - Why cybersecurity is an area of focus for the SEC 
  • 8:03 - A summary of the SEC’s new cybersecurity rules and disclosure requirements
  • 10:21 - Types of cyber incidents, including what’s required to be disclosed in the Form 8-K and how companies should think about “material” impacts
  • 12:58 - The importance of developing relationships with federal law enforcement and how smaller companies can start to build those relationships
  • 20:19 - An ideal sequence of action steps when a cyber incident occurs
  • 24:32 - Top considerations when preparing to disclose in accordance with the SEC’s cybersecurity rules
  • 33:10 - Key takeaways for companies reviewing their processes and preparing for the new disclosure requirements

Looking for more information on cybersecurity? Check out our publication and register for our Q3 2023 Quarterly accounting webcast for a detailed discussion of the SEC’s cybersecurity rules with Kyle; PwC Vice Chair, Wes Bricker; and Raquel Fox, Partner & Co-Head of SEC Reporting and Compliance; Capital Markets; M&A; Corporate Governance at Skadden, Arps, Slate, Meagher & Flom LLP and Affiliates. 

Kyle Moffatt is PwC’s Professional Practice leader, leading a team responsible for working with standard setters and regulators as well as delivering brand-defining thought leadership and educational materials. He also consults with engagement teams and audit clients on SEC reporting matters. Before PwC, Kyle spent almost 20 years with the SEC, most recently as Chief Accountant and Disclosure Program Director in the Division of Corporation Finance.


Matt Gorham is PwC Cyber & Privacy Innovation Institute Leader, providing thought leadership, perspective, and analysis on trends affecting all aspects of cybersecurity and privacy. He has over three decades of experience mitigating threats through building and leading cross functional teams. Before PwC, Matt spent 25 years with the FBI as the Assistant Director of Cyber.


Heather Horn is PwC’s National Office thought leader, responsible for developing our communications strategy and conveying firm positions on accounting and financial reporting matters. She is the engaging host of PwC’s accounting and reporting weekly podcast and quarterly webcast series. With over 30 years of experience, Heather’s accounting and auditing expertise includes financial instruments and rate-regulated accounting.


Transcripts available upon request for individuals who may need a disability-related accommodation. Please send requests to us_podcast@pwc.com.

Up next
Yesterday
Lease accounting reset - Embedded leases
We continue our lease accounting podcast miniseries with an episode focused on embedded leases. Some arrangements to provide services or purchase inventory rely on the use of a specific asset to fulfill the contract. Even if the word “lease” doesn’t appear, the rights conveyed to ... Show More
45m 11s
Jul 1
Lease accounting reset – Variable rents
We continue our lease accounting miniseries with a focus on variable lease payments, an area that can significantly influence lease classification and measurement. In this episode, we explore the complexities of usage-based and index-based payments, fair market rent adjustments, ... Show More
35m 44s
Jun 26
Sustainability now: ISSB clarifying greenhouse gas disclosures
A video of this podcast is available on YouTube, Spotify, or PwC’s website at viewpoint.pwc.comIn this episode, we highlight the proposed amendments to IFRS S2, the climate-related disclosure standard from the International Sustainability Standards Board (ISSB). Learn how the cha ... Show More
27m 27s
Recommended Episodes
Mar 2024
Digging into the SEC climate disclosure rules
The U.S. Securities and Exchange Commission approved new rules this month on what information companies must disclose about their greenhouse gas emissions and climate risks, but notably dropped more stringent requirements that the commission initially proposed. Despite being halt ... Show More
32m 1s
Jun 2022
Cyber security, a legal requirement? With Clyde & Co’s Reece Corbett-Wilkins and Avryl Lattin
In this episode of the Cyber Security Uncut podcast, Reece Corbett-Wilkins and Avryl Lattin, partners at global law firm Clyde & Co, join hosts Phil Tarrant and Major General (Ret’d) Marcus Thompson to discuss how cyber security is becoming a legal obligation for firms. The podca ... Show More
46m 9s
Mar 2024
Unpacking the SEC's climate disclosure rule
The US Securities and Exchange Commission on March 6 finalized a long-awaited rule requiring thousands of publicly traded companies to disclose certain climate-related information. The final rule takes a narrower approach than what the SEC proposed in 2022; it also marks a signif ... Show More
29 m
Jun 2024
Hidden Threats: The Role of the CFO in Privacy and Security | Joe Oleksak
CFOs wield significant influence in safeguarding a company’s financial data, but entrusting cybersecurity solely to their CIOs may jeopardize privacy and open the door to data breaches. As Partner at Plante Moran, Joe Oleksak advises businesses on cybersecurity, IT audit, and tec ... Show More
47m 52s
Mar 2024
2820: The Cyber Insurance Equation: Risk, Responsibility, and Readiness
In today's digital landscape, the role of cybersecurity within organizations is more critical than ever. As businesses navigate the complexities of protecting their data and infrastructure, the Chief Information Security Officer (CISO) stands at the forefront of this evolving bat ... Show More
36m 29s
Dec 2019
Why Cybersecurity Isn’t Only a Tech Problem
Thomas Parenty and Jack Domet, cofounders of the cybersecurity firm Archefact Group, say that most organizations are approaching cybersecurity all wrong. Whether they're running small companies or working in multinational corporations, leaders have to think beyond their IT depart ... Show More
27m 29s
Aug 2022
Proptech Pulse: Why risk-mitigation strategies should be on every business’ playbook
Nick Bouris, the recently appointed chief executive of the Managed App, chats with Momentum Media’s Grace Ormsby for the latest episode of  REB’s Proptech Pulse. With the real estate sector facing an unprecedented rise in illicit finance risks, including instances of trust accoun ... Show More
20m 13s