The SEC has recognized the importance of cybersecurity risk management and is using these rules to formalize the discipline. Cybersecurity risk management will eventually rise to the same level as market risk, capital risk, and operational risk.

Source: Help Net Security