No topic has likely garnered more attention in boardrooms over the last couple of years than cybersecurity. And rightfully so when the full extent of direct and indirect costs of a data breach are considered. Direct costs include legal fees, forensic experts, public relations, remediation efforts, potential fines and regulatory compliance expenses. However, it is the indirect costs of operational disruption, increased insurance premiums, brand reputational damage, loss of future revenue streams, etc. that can lead to business ruin.

The US Securities and Exchange Commission (SEC) published guidance on disclosure of key performance indicators and metrics in MD&A ( Commission Guidance on Management’s Discussion) on January 30, 2020. Since this Guidance became effective on the publication date, it now applies to all periodic reports filed with the SEC.

Kral Ussery serves US public and private companies to protect and grow shareholder value, as well as non-profits and governments with internal controls and in combating fraud. Download our services flyer .