AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
How to Determine Whether an Incident Is Material
It's not about four days of having an incident, the requirement is that you have a reasonably practical timeframe for determining whether or not an incident is material. You have a pretty good process then to do that, which we should dig into. I think generally people who work in publicly held companies, all of the people that I've talked with, both CEOs and Chief of Permaceous Security Officers, say, we already have to report when we have a cyber incident that is material.