Big Business Detailing More About Cybersecurity Actions, but Specifics Lacking

Fortune 100 companies are giving the public more information about how they're dealing with cybersecurity challenges, but the gaps in information remain big, said Chuck Seets, Ernst and Young EY Americas Assurance principal, and Pat Nieman, EY Americas audit committee forum leader, in a Sunday blog at the Harvard Law School Forum on Corporate Governance. They said only 9% of proxy statements and Form 10-Ks analyzed disclosed any use of response readiness simulations. With cybersecurity near "an inflection point" due to bigger risks and looming regulation, companies lagging in disclosures and in tackling cyberthreats "should foster a culture of cooperation while elevating the tone at the top," they said.