SEC Cybersecurity Disclosure Rule SEC-REG-S-P: Regulation S-P Customer Notification Coordination

Amended Regulation S-P (May 2024) requires covered broker-dealers, investment advisers, funds, and transfer agents to adopt incident response programs and provide customer notification within 30 days of detecting unauthorized access; coordinate with Item 1.05 obligations for registrants.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Disclosure Controls and Supporting Process

SEC-CYB-12 Disclosure Controls Tailored to Cybersecurity
SEC-CYB-13 Incident Response Plan Alignment with Disclosure Obligations
SEC-CYB-16 External Counsel and Forensic Engagement Protocols
SEC-CYB-17 Coordination with Other Regulatory Notifications
SEC-CYB-18 Historical Incident Tracking and Repeat Disclosure Analysis
SEC-CYB-19 Training for Material Cybersecurity Disclosure Decision Makers
SEC-CYB-20 Recordkeeping for Cybersecurity Materiality Determinations
SEC-REG-SCI Reg SCI Coordination for Covered Entities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All SEC Cybersecurity Disclosure Rule controls