The U.S. Securities and Exchange Commission in July adopted rules that require public companies to disclose certain information about their cyber risk. The U.S. Securities and Exchange Commission in July adopted rules that require public companies to disclose certain information about their cyber risk.