Given the recent guidance from the SEC on how public companies must include cyber security postures in their disclosures, many have been waiting to see how these companies would interpret this guidance. Facebook’s IPO filing gives some indication of what this is going to look like going forward.
While most of the discourse in Facebook’s filing talks about data privacy, they do a good job explaining why a privacy-related breach would be costly for their business. I’m not a regulator, but it seems like this is a good way to disclose this type of risk – put it in context of the monetary impact of a problem occurring.
Tagged: Facebook, SEC guidance, Social Networks
