Danette Edwards, partner and Co-Chair of the Securities Enforcement Defense practice, spoke with The Wall Street Journal's "Cybersecurity" newsletter regarding the new Securities and Exchange Commission (SEC) rules regarding cybersecurity and the implications for companies' Chief Information Security Officers (CISOs) and other security risk executives. Danette noted that the newly raised stakes, particularly with respect to assessing the scope and quantitative and qualitative impacts of cyber incidents, further elevates the role of CISOs in fostering a robust corporate governance program. "Just the issuance of the rules puts an exclamation point on the need for good cyber controls. It gives [CISOs] a megaphone to talk to business executives and make sure the company really is prioritizing good cybersecurity today, and not making it an afterthought. CISOs may find themselves with an expanded budget because the risks are greater."

"Readers React: CISO Role After New SEC Rules," The Wall Street Journal, August 3, 2023

For more thoughts from Danette on the SEC's recent cybersecurity warning, see "SEC Sends Ominous Warning to CISOs and Cybersecurity Professionals With Wells Notice Concerning SolarWinds Breach."