{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/sec-agent/8k-1-05",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/sec-agent/8k-1-05)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-21",
    "fingerprint": "ewai:se:b1066e",
    "proof": "sha256:7d7d4857f45b72c15944fd9d5d9b0a152ed304480b88683b89779b044c9d0de1",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "agent_id": "agent:us:sec:agent-sec-8k-1-05",
  "agent_version": "1",
  "schema_version": "1",
  "graph_version": "2026-10-10.1",
  "section": "Form 8-K Item 1.05 (17 CFR 249.308)",
  "title": "Form 8-K Item 1.05 Material Cybersecurity Incident Agent",
  "question": "When must we disclose a cybersecurity incident to the SEC, and what must the disclosure contain?",
  "requirements": [
    {
      "id": "requirement:us:sec:1-05-a",
      "provision": "Form 8-K Item 1.05(a)",
      "title": "Disclose a material cybersecurity incident",
      "verbatim": true
    },
    {
      "id": "requirement:us:sec:1-05-materiality",
      "provision": "Form 8-K Item 1.05, Instruction 1",
      "title": "Materiality determination without unreasonable delay",
      "verbatim": true
    },
    {
      "id": "requirement:us:sec:1-05-deadline",
      "provision": "Form 8-K, General Instruction B.1",
      "title": "Filing within four business days of the materiality determination (summary)",
      "verbatim": false
    },
    {
      "id": "requirement:us:sec:1-05-c-delay",
      "provision": "Form 8-K Item 1.05(c)",
      "title": "Delay for national security or public safety (summary)",
      "verbatim": false
    },
    {
      "id": "requirement:us:sec:1-05-amend",
      "provision": "Form 8-K Item 1.05, Instruction 2",
      "title": "Amend when information was not available (summary)",
      "verbatim": false
    }
  ],
  "deadlines": {
    "8-K Item 1.05": {
      "business_days": 4,
      "from": "materiality_determination",
      "source": "https://www.sec.gov/files/form8-k.pdf"
    }
  },
  "sanctions": [
    {
      "key": "civil-penalty-21b",
      "provision": "Exchange Act §21B(b), 15 U.S.C. §78u-2(b)",
      "authority": "Securities and Exchange Commission",
      "source": "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2B-sec78u-2.htm",
      "tiers": [
        {
          "tier": 1,
          "natural_person_usd": 5000,
          "other_person_usd": 50000
        },
        {
          "tier": 2,
          "natural_person_usd": 50000,
          "other_person_usd": 250000,
          "condition": "fraud, deceit, manipulation or deliberate or reckless disregard of a regulatory requirement"
        },
        {
          "tier": 3,
          "natural_person_usd": 100000,
          "other_person_usd": 500000,
          "condition": "tier 2 conduct that created substantial losses or risk of losses to others"
        }
      ],
      "per": "each act or omission",
      "adjusted": "not_in_register",
      "id": "sanction:us:sec:civil-penalty-21b"
    },
    {
      "key": "criminal-32a",
      "provision": "Exchange Act §32(a), 15 U.S.C. §78ff(a)",
      "authority": "U.S. Department of Justice and federal courts",
      "source": "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2B-sec78ff.htm",
      "natural_person_max_fine_usd": 5000000,
      "max_prison_years": 20,
      "entity_max_fine_usd": 25000000,
      "condition": "willful violation",
      "id": "sanction:us:sec:criminal-32a"
    }
  ],
  "cases": [
    {
      "name": "First American Financial Corporation",
      "date": "2021-06-15",
      "penalty_usd": 487616,
      "release": "2021-102",
      "source_url": "https://www.sec.gov/newsroom/press-releases/2021-102"
    },
    {
      "name": "Unisys Corp.",
      "date": "2024-10-22",
      "penalty_usd": 4000000,
      "release": "2024-174",
      "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
    },
    {
      "name": "Avaya Holdings Corp.",
      "date": "2024-10-22",
      "penalty_usd": 1000000,
      "release": "2024-174",
      "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
    },
    {
      "name": "Check Point Software Technologies Ltd",
      "date": "2024-10-22",
      "penalty_usd": 995000,
      "release": "2024-174",
      "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
    },
    {
      "name": "Mimecast Limited",
      "date": "2024-10-22",
      "penalty_usd": 990000,
      "release": "2024-174",
      "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
    }
  ],
  "counts": {
    "requirements": 5,
    "controls": 4,
    "cases": 5,
    "penalties_usd_total": 7472616
  },
  "deterministic": true,
  "agent_hash": "1d64d93413949409a56752ac93371b959eea4f4d3f02797df09c7b464f2a2db8",
  "hash": "sha256:7d7d4857f45b72c15944fd9d5d9b0a152ed304480b88683b89779b044c9d0de1",
  "case_note": "These cases concern conduct before Item 1.05 took effect (December 2023) and were brought under the periodic reporting and disclosure controls rules; they show how the SEC assesses cyber disclosure.",
  "endpoints": {
    "self": "https://legal.exploreworldai.com/api/public/v1/sec-agent/8k-1-05",
    "node": "https://legal.exploreworldai.com/api/public/v1/node/agent/agent%3Aus%3Asec%3Aagent-sec-8k-1-05",
    "page": "https://legal.exploreworldai.com/agent/sec/8k-1-05",
    "nodes": "https://legal.exploreworldai.com/graf/sec",
    "statute": "https://www.federalregister.gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and-incident-disclosure"
  },
  "not_covered": {
    "other_sections": "§13(d) beneficial ownership, §15(d), §16 insider reporting and Regulation S-K Item 106 are not_in_register for this agent."
  },
  "provenance": {
    "primary_source": "https://www.federalregister.gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and-incident-disclosure",
    "read_at": "2026-10-10",
    "cases": "SEC press releases (sec.gov)",
    "method": "verbatim statute where verbatim = true; editorial case and control mapping (unreviewed)"
  },
  "source": "Source: NovaCopilot",
  "version": "legal-2026-10-21",
  "expires": "2026-10-22T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-21+legal-2026-10-21+2026-10-21T16:46:51",
    "content_hash": "sha256:7d7d4857f45b72c15944fd9d5d9b0a152ed304480b88683b89779b044c9d0de1",
    "revalidate_after": "2026-10-21T21:42:04.790Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/sec-agent/8k-1-05",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "authority_decisions": 5,
    "control_mappings": 4
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}