Carolyn Maloney actually said...
Last year, the SEC came out with a guidance that financial firms had to disclose the cost of material cyber attacks and include a description of relevant insurance coverage to shareholders.
05/31/2012