Skip to content.

EXCLUSIVE IN-PERSON EVENT

SEC Cybersecurity Disclosures and Materiality Analysis Workshop

New York: Tuesday, April 2  |  9:00 AM – 12:30 PM

485 Lexington Ave. Floor 11, New York, NY 10017 

New Jersey: Wednesday, April 3  |  9:00 AM – 12:30 PM

354 Eisenhower Parkway, Suite 2050, Livingston, NJ 07039

Complimentary registration

This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply to the reCAPTCHA services. You can learn more about how NAVEX processes your personal data by reviewing the NAVEX privacy statement.

Thank you for registering. You will receive a confirmation email shortly.

Space is limited for this invite-only workshop with NAVEX partner, Crowe — one of the largest public technology consulting firms in the US.

Unlock the power of cybersecurity reporting for regulatory compliance.  

With cyber threats impacting public companies and shareholders, the United States Securities and Exchange Commission (SEC) adopted final rules requiring: 

  • Disclosure of material cybersecurity incidents
  • Periodic disclosure of a registrant’s cybersecurity risk management, strategy and governance in annual reports.

Your ability to analyze and report material cybersecurity incidents to the SEC is essential for maintaining trust with your shareholders and ensuring you stay on the right side of regulations.

Whether you’re a compliance officer, legal counsel or risk management professional, this event is designed to equip you with the knowledge and tools necessary to tackle the challenges of cybersecurity reporting head-on.  

What you will gain from this session: 

  • Understanding the SEC disclosure rules: Gain comprehensive insights into the SEC’s requirements for public company cybersecurity disclosures, including the nuances of 10K and 8K reporting.   
  • Reviewing recent public company cyber events: Explore recent examples of how public companies have reported cyber events to the SEC and the resulting shareholder impacts 
  • Mastering cyber event materiality analysis: Learn the essential techniques for performing a thorough cyber event materiality analysis tailored to your company’s specific needs

The Materiality Analysis Workshop:  

Using a template built on leading practices, you will participate in a hands-on workshop to perform materiality analysis with your peers.

You’ll quickly understand how to evaluate cyber incident materiality- across key domains including financial, reputational, regulatory, and more- by using the NAVEX Integrated Risk Management platform.  

Don’t miss this opportunity to enhance your understanding of SEC cybersecurity disclosure rules and materiality analysis. Spaces are limited, so register now to secure your spot! 

CPE Credits 

Attendees will earn 2 CPE credits for participating in the workshop.

Check out the agenda:

Time   Session   Speaker   
09:00   Registration and networking      
9:30   

Presentation 

Overview of SEC Public Company Cybersecurity Disclosure Rules  

Recent Public Company Cyber Events and 8K Reports 

Cyber Event Materiality Analysis 

 Josh and Michael  
10:00  Materiality Analysis Workshop     Crowe and NAVEX  
11:15 NAVEX One and CERA Overview  Matt  
11:45   Networking lunch     Sponsored by NAVEX 
12:30   Depart      

Our presenters

  • Josh Reid

    Josh Reid

    Principal GRC Technologies Leader

    Crowe

    Josh Reid

    Josh Reid

    Principal GRC Technologies Leader

    Crowe

    Josh is a principal in the consulting group at Crowe and serves as Crowe’s firmwide Governance, Risk and Compliance (GRC) Technologies leader. He has over 19 years of experience helping companies align risk and compliance programs with GRC technology solutions including IT risk management, cybersecurity, third party risk, compliance, internal controls, and internal audit. Josh focuses on helping clients realize value in leveraging GRC software platforms to centralize risk management frameworks, automate risk assessments, and improve risk and compliance reporting.

  • Michael Lucas

    Michael Lucas

    Principal Digital Security and Privacy Leader

    Crowe

    Michael Lucas

    Michael Lucas

    Principal Digital Security and Privacy Leader

    Crowe

    Michael is a principal in the consulting group at Crowe with over 15 years of experience serving global clients. Michael has spent his career solving cybersecurity, privacy, and data protection challenges for clients across a variety of industries. Michael specifically focuses on the “second line of defense” within organizations – notably CISOs and risk management teams. He has led numerous projects helping clients assess, design, and optimize components of their organization’s cybersecurity, privacy, and data protection programs.

  • Matt Crome

    Matt Crome

    Director GRC Solutions

    NAVEX

    Matt Crome

    Matt Crome

    Director GRC Solutions

    NAVEX

    Matt has been leading complex projects and diverse teams for over a decade, ranging from US Military operations to process development. His experience in implementation covers all aspects for IRM/GRC, including enterprise and third-party risk management, threat and vulnerability management, and policy compliance for public, private, and governmental operations. Matt’s team includes Solutions Architects focused on creating world-class solutions to industry challenges, utilizing NAVEX’s industry leading tools for risk and compliance. When he is not developing tools to address new industry challenges, Matt can be found with a book on nearly any type of history or somewhere in the great outdoors. 

    Matt holds certifications in GRC and Third-Party Risk Management and earned his Masters of Cybersecurity from Maryville University of St. Louis, and his BS in Management Information Systems from Emporia State University.