Anatomy of a cybersecurity incident disclosure

Deep dive into the anatomy of a cyber incident disclosure following a third-party software provider as it works though an incident from initial discovery through the following eighteen months of disclosure. This report focuses on incident disclosure and follows the development of the incident through their reports as filed with the SEC. Some of the interesting things to note in this walk through of the disclosures are:

• The wording and materiality assessment of the initial disclosure
• The additional information that is shared as circumstances develop
• The wording and location of disclosures within the documents and compliance with the intent of the new requirements