On the recordFebruary 28, 2019
Mr. President, today I am reintroducing the Cybersecurity Disclosure Act along with two members of the Select Committee on Intelligence, Senator Collins, and the ranking member, Senator Warner, in addition to Senator Kennedy and Senator Jones, who also serve with me on the Senate Banking Committee. In response to data breaches of various companies that exposed the personal information of millions of customers, our legislation asks each publicly traded company to include--in Securities and Exchange Commission, SEC, disclosures to investors--information on whether any member of the board of directors is a cybersecurity expert, and if not, why having this expertise on the board of directors is not necessary because of other cybersecurity steps taken by the publicly traded company. To be clear, the legislation does not require companies to take any actions other than to provide this disclosure to its investors. In Deloitte's 11th Global Risk Management Survey of financial services institutions, published last month, ``sixty-seven percent of respondents named cybersecurity as one of the three risks that would increase the most in importance for their business over the next two years, far more than for any other risk.…





