SEC cyber disclosure, SEC cybersecurity incident disclosure
Release No. 33-11216, Form 8-K Item 1.05, 17 CFR 229.106
- What this page is
- SEC cyber disclosure, SEC cybersecurity incident disclosure
- Checked against the official source
- 2026-08-15Changed
- Responsible publisher
- ExploreWorld Legal, editorial deskLiability position
Short answer
Does SEC cyber disclosure apply to your operation, and which paragraph decides?
SEC cyber disclosure rests on Release No. 33-11216, Form 8-K Item 1.05, 17 CFR 229.106 and is tested here by a deterministic rule tree of 3 rules with a coverage score of 100 percent. The tree reads your facts, names the paragraph that decides the question and returns an outcome carrying citation, content hash and read date 2026-08-15. The outcome is a machine classification, not a compliance decision.
Release No. 33-11216, Form 8-K Item 1.05, 17 CFR 229.106Checked against the publisher 2026-08-15Official text
A source reference, not legal advice.
The full basis, ready-made
DORA/NIS2 pack, total 186.25 € (about 201 USD)
Evidence chain and hash per row included. One-time purchase, delivered instantly.
- Jurisdiction
- Federal
- Risk dimensions
- security, financial reporting
- Tier
- Tier 1
- Coverage
- 100 %
- Impact
- 5/5
- Read
- 2026-08-15
Source chain
Every block in the register row has its own address, so an outcome can be cited down to the paragraph. The node carries the reference, the scope, the link to the official text and the outcomes in the tree that rest on the block.
- Material incident report
Form 8-K Item 1.05
Nature, scope, timing and material impact of an incident, filed within four business days after it is determined to be material.
- Materiality determination
Form 8-K Item 1.05, Instruction 1
The determination is made without unreasonable delay after discovery.
- National security delay
Form 8-K Item 1.05(c)
Filing may be delayed when the US Attorney General notifies the SEC that disclosure poses a substantial risk to national security or public safety.
- Annual risk management and governance
17 CFR 229.106
Processes for cybersecurity risk, board oversight and management role, in the annual report.
Release No. 33-11216, Form 8-K Item 1.05, 17 CFR 229.106
Rule tree
Rules are tested top down. Conditions are statutory elements and each outcome points to the register blocks it rests on.
sec-delay
Filing may be delayed
risk · Requirement applies conditionally · delay
Form 8-K Item 1.05(c) permits a delay when the Attorney General notifies the SEC that disclosure poses a substantial risk to national security or public safety.
sec-file
Form 8-K is due within four business days
risk · Requirement applies · item-105
Form 8-K Item 1.05 requires a description of the nature, scope, timing and material impact of the incident within four business days after it is determined to be material.
sec-assess
Materiality must be determined without unreasonable delay
risk · Requirement applies conditionally · materiality, item-106
Instruction 1 to Form 8-K Item 1.05 requires materiality to be determined without unreasonable delay after discovery. The annual disclosure under 17 CFR 229.106 applies regardless.
Outcome
allowed · Outside the scope
The rule yields no requirement for the facts supplied
The company is not stated as an SEC reporter, or no incident is stated.
fallback · sha256:sha256:36dedc793116c4765ccf952f5
Monitoring
The journal shows what moved in the register row, with the hash before and after. The impact score follows a rule stated in plain words.
How impact is scored: Grund: tillagd eller borttagen uppgift ger 3, ändrad uppgift 2, omläsning utan ändring 0. Tillägg: +1 när ändringen rör status eller tillämpningsdatum. Tillägg: +1 när agenten ligger i klass 1. Siffran begränsas till 0 till 5.
2026-08-15 · 0/5 · lasning
Raden läst mot den officiella publiceringen utan ändring
2023-12-18 · 4/5 · tillampningsdatum, status
Regeln började tillämpas enligt utgivaren
2023-07-26 · 5/5 · antagande, identifierare, status
Regeln antogs enligt Release No. 33-11216, Form 8-K Item 1.05, 17 CFR 229.106
Supervision
Artifacts and integrity
- https://legal.exploreworldai.com/api/public/v1/us-agents/sec-cyber-disclosure/manifest.json
- https://legal.exploreworldai.com/api/public/v1/us-agents/sec-cyber-disclosure/run
- https://legal.exploreworldai.com/api/public/v1/us-agents/sec-cyber-disclosure/monitor.json
- sha256:7de0bee559e5b90308137c220b71e0513d43b88c1732be0e12fa75b4782b7dbf
- sha256:72f587efe5963d8907c08cc44a889723972df2d32509fc591ac817d10473f8f7
The verdict is a machine classification of the outcome, not legal advice and not a compliance decision. Responsibility position · Release No. 33-11216, Form 8-K Item 1.05, 17 CFR 229.106
Verifiable trust signals
- Six fixed blocks, one source per line
- No sentence written by a language model
- Engine version and read date on every answer
- No customer data, no documents, no advice
- Model card and audit published under the EU AI Act