In this episode of S&C’s Critical Insights, Bob Downes, Tony Lewis and Chas Kerin discuss five recent SEC cybersecurity enforcement actions, with a focus on deficient corporate procedures and disclosure controls. They cover the background of the actions, including noteworthy aspects and common issues between them. They also explore how the SEC is addressing cybersecurity issues outside of enforcement, including from the examination and rulemaking perspectives. They conclude with a few takeaways and best practices.