What’s Material to the SEC, Three Months Into Cyber Disclosure Rules?

Three months since the launch of the Securities and Exchange Commission’s cyber incident reporting rule, companies are grappling with the question of when the impact of a breach or attack is considered material.