U.S. SEC

The Securities and Exchange Commission's newly adopted rule sets a four-day timer for public companies hit by a "material" cybersecurity incident.