Cybersecurity and National Security meet: SEC’s New Cyber Rule unveils

TLDR: The Department of Justice (DOJ) has released guidance stating that it will very rarely grant an extension of the deadline for registrants to disclose material cybersecurity incidents under the SEC’s Final Rules. Under these rules, registrants must generally disclose material incidents within four business days, but they may delay disclosure if it poses a risk to national security or public safety. The DOJ has outlined a limited set of circumstances in which an extension may be considered. However, it has made it clear that such requests will not be granted in most cases. This means that registrants should be prepared to disclose within the regular four-day timeframe.