The initial report is not expected to be exhaustive or final, and the word material is already a well established term of art. Here is what they are actually pr

The initial report is not expected to be exhaustive or final, and the word material is already a well established term of art. Here is what they are actually proposing be reported- it's really not a lot: Specifically, we propose to amend Form 8-K by adding new Item 1.05 that would require a registrant to disclose the following information about a material cybersecurity incident, to the extent the information is known at the time of the Form 8-K filing: When the incident was discovered and whether it is ongoing; A brief description of the nature and scope of the incident; Whether any data was stolen, altered, accessed, or used for any other unauthorized purpose; The effect of the incident on the registrant's operations; and Whether the registrant has remediated or is currently remediating the incident https://www.federalregister.gov/documents/2022/03/23/2022-05480/cybersecurity-risk-management-strategy-governance-and-incident-disclosure https://www.federalregister.gov/documents/2022/03/23/2022-05...