25.6.13
This website uses cookies to ensure you get the best experience on our website. Learn more

DDN 601 Determining Cybersecurity Incident Materiality Under U.S. SEC Disclosure Rules

DDN 601 is an executive learning experience with expert lectures, peer discussion and applied group case studies. DDN 601 participants receive 2 hours of live online instruction time, or 4 hours of offline learning time if participating in a DDN 601 table top, plus approximately 2 hours of pre-reading. Participants will be taught the BLAST RADIUS—FALLOUT (BRFO™) process for cybersecurity incident materiality determination. BRFO is based upon systemic BLAST RADIUS analysis and understanding qualitative and quantitative cybersecurity incident FALLOUT impacts. BRFO provides SEC registrants with a way to adopt an informed and deliberative process for making a cybersecurity incident materiality disclosure determination in response to the new SEC rules. This masterclass has several key learning objectives. They are: 1. Improving corporate director and management team understanding of the new SEC disclosure requirements for cybersecurity incidents including the concepts of materiality and reasonable investor. 2. Enabling participants to adopt and apply an informed and deliberative process to support and document their decision-making for determining cybersecurity incident materiality. 3. Strengthening the ability and preparedness of CIOs and CISOs to meet boardroom and C-suite leadership expectations on fulfilling the new SEC disclosure rules. Upon completion of the course, participants: —Understand the new U.S. SEC disclosure rules and the role of Form 8-K. —Are able to apply and implement the BRFO(TM) process. —Are able to disclose BRFO as their process for determining incident materiality under SEC cybersecurity disclosure rules. —Will have strengthened their ability to understand and analyze the linkages between cybersecurity incidents and their wide ranging impacts on stakeholders. —Have received an introduction to systemic risk in digital and cybersecurity oversight. —Have applied the BRFO process against several cyber incident cases and made a materiality determination.

Skills / Knowledge

  • cybersecurity governance
  • corporate governance
  • SEC cyber incident disclosure
  • BLAST-RADIUS - FALLOUT (BRFO) process