SEC Cybersecurity Disclosure Rule SEC-CYB-20: Recordkeeping for Cybersecurity Materiality Determinations

Maintain complete records supporting materiality determinations, disclosure timing decisions, and any reliance on delays or omissions, sufficient to evidence compliance under SEC enforcement reviews.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Disclosure Controls and Supporting Process

SEC-CYB-12 Disclosure Controls Tailored to Cybersecurity
SEC-CYB-13 Incident Response Plan Alignment with Disclosure Obligations
SEC-CYB-16 External Counsel and Forensic Engagement Protocols
SEC-CYB-17 Coordination with Other Regulatory Notifications
SEC-CYB-18 Historical Incident Tracking and Repeat Disclosure Analysis
SEC-CYB-19 Training for Material Cybersecurity Disclosure Decision Makers
SEC-REG-S-P Regulation S-P Customer Notification Coordination
SEC-REG-SCI Reg SCI Coordination for Covered Entities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All SEC Cybersecurity Disclosure Rule controls