A significant shift in how companies must comply with cybersecurity reporting and disclosure requirements means security leaders will begin 2024 reviewing the most efficient ways their organizations can comply with December 18th’s ruling. Much attention has been paid to an 11th-hour shift in the final version which means companies no longer need to disclose any specific or technical information about their incident response, system or potential vulnerabilities if it could impede their ability to respond and remediate.

Source: SC Magazine