Congress May Impose Cybersecurity Reporting Requirements

With cyberattacks on the rise and some companies still unprepared to deal with the aftermath, Congress may get involved by requiring public companies to file cyber reports with the Securities and Exchange Commission (SEC).

The Internet remains one of the last unregulated frontiers and many who use it to make money would prefer to see it stay that way. However, some members of Congress believe that the chief executive officers need to take a more active role in knowing whether their company is prepared for information systems failure. Thus, the potential reporting requirement.

"The government has essentially relied on the voluntary efforts of industry both to make less buggy software and make systems more resilient," Michael Vatis, former director of the National Infrastructure Protection Center at the FBI told the New York Times. "What we're seeing is that those voluntary efforts are insufficient, and the repercussions are vast."

Rep. Adam Putnam (R-FL), chair of the House Government Reform Committee's Subcommittee on Technology, Information Policy, Intergovernmental Relations, and the Census, is reportedly considering introducing legislation later this year to address the knowledge gap that occurs when no one tracks just how far reaching the results of cyberattacks can be. The reporting requirement would go a long way toward filling that gap.

While the primary focus of Congress’ Internet attention will stay on anti-spam legislation, the subcommittee will consider cybersecurity reporting that could parallel the reporting requirements laid out by the 2002 Sarbanes-Oxley Act.

Experts say that Congress should avoid a “one size fits all” law, since a variety of uses and requirements exist among corporations.

"Different companies have different security needs and different risks. So it's impossible to set up a mandate for everyone,” Daniel Burton, vice president of government affairs for security vendor Entrust, told PC World.

You may like these other stories...

There's thunder and lightning in the cloud these days. And the rumbling is all about security. Could peer-to-peer file transfers be the answer? As the old accounting adage goes, there's more than one way to skin a...
Saving Excel spreadsheets as PDF files has gotten incrementally easier over the years, but can still require more effort than necessary. When saving a document as a PDF, many users go through several mouse clicks on the File...
Imagine being able to file a business expense, such as a cab ride or a meal with a new client, in real time from an app on your smartphone. Here’s the best part: Imagine being reimbursed for that expense in 24 to 48...

Already a member? log in here.

Upcoming CPE Webinars

Nov 5Join CPA thought leader and peer reviewer Rob Cameron and learn ways to improve the outcome of your peer reviews while maximizing the value of your engagement workflow.
Nov 18In this session Excel expert David Ringstrom, CPA tackles what to do when bad things happen to good spreadsheets.
Nov 19How do you minimize redundant work and unnecessary steps to maximize the amount of work moving through your firm?
Nov 20Kristen Rampe will share how to uncover new opportunities with your clients by asking powerful questions.