On February 20, the Securities and Exchange Commission approved the issuance of an interpretive release, available here, to provide guidance to public companies when preparing disclosures about cybersecurity risks and incidents. The release also communicates the Commission’s views on the


Making a Market for Corporate Disclosure
Public-company information has great social value. However, it is widely thought that left to their own devices, firms will under-disclose information about their condition and prospects. This thinking is embodied in the mandatory-disclosure regime that sits at the foundation of …