SEC Cybersecurity Disclosure Rule SEC-CYB-18: Historical Incident Tracking and Repeat Disclosure Analysis

Maintain a repository of past cybersecurity incidents, including non material incidents, to support evaluation of cumulative risk, identification of patterns, and disclosure analysis regarding prior incidents that may now have material implications.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Disclosure Controls and Supporting Process

SEC-CYB-12 Disclosure Controls Tailored to Cybersecurity
SEC-CYB-13 Incident Response Plan Alignment with Disclosure Obligations
SEC-CYB-16 External Counsel and Forensic Engagement Protocols
SEC-CYB-17 Coordination with Other Regulatory Notifications
SEC-CYB-19 Training for Material Cybersecurity Disclosure Decision Makers
SEC-CYB-20 Recordkeeping for Cybersecurity Materiality Determinations
SEC-REG-S-P Regulation S-P Customer Notification Coordination
SEC-REG-SCI Reg SCI Coordination for Covered Entities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All SEC Cybersecurity Disclosure Rule controls