Skadden Discusses a Board's Role in Oversight of Cybersecurity Risks

Partners Anita Bandy, Brian Breheny, Raquel Fox, William Ridgway and David Simon discuss how new SEC rules and last year’s enforcement action against SolarWinds make it clear that directors are expected to actively engage in the oversight of their companies’ cybersecurity measures. The authors provide:

1. A synopsis of the new SEC cyber disclosure rules.
2. Key considerations for boards and directors.
3. An overview of SEC cyber litigation and enforcement related to SolarWinds’ failure to manage cybersecurity risks.
4. A cyberrisk and disclosures checklist for boards and senior executives.
5. A list of factors that may make a cyberattack “material.”