SEC now requires companies to disclose cyberattacks in 4 days
This isn&#x27;t as good of a thing as you think. Instead of focusing on finding out the scope of the compromise and making sure the threat actors are contained and can&#x27;t easily compromise again, incident responders will ger pressures to focus on answering questions about who gets notified. They should be given enough time to thoroughly respond to it and then notify everyone that needs notifying.<p>Having to dedicate resources to scour through compromised data for pii instead of for forensic evidence before you even contain&#x2F;eradicate a threat only helps threat actors. The public does not benefit from bad or inefficient incident response.<p>I am sure HN crowd will get that this isn&#x27;t something you can just throw manpower&#x2F;bodycount at either to get a faster response. It takes as long as it has to take.