The new SEC rules make it seem that there is no need to report the presence of security vulnerabilities, but that doesn't quite tell the full story.



Source: DarkReading
Source Link: https://www.darkreading.com/edge/do-cisos-have-to-report-security-flaws-to-the-sec