Business Security and Risk Management

New SEC cybersecurity disclosure rules require public companies to report “material” incidents within 4 business days—making vendor-caused breaches a board-level timing risk. Most incidents start with third parties, so contracts now function as your compliance clock and evidence file. This article shows how to draft, negotiate, and enforce a cybersecurity addendum that supports SEC disclosures, […]

A well-drafted vendor cybersecurity addendum can cap breach-related exposure through three core levers: tight indemnity language, a defined liability cap, and clear security/notice duties. Under New York law, these clauses are generally enforceable in commercial contracts when negotiated and not barred by public policy. This article explains how to draft an addendum that reduces post-breach […]

You can reduce AI voice cloning scam risk by using a family “safe word,” enabling MFA on accounts, and placing a free fraud alert with the credit bureaus. If you’re targeted, save evidence, report it to the platform and FTC, and contact banks immediately. This article explains practical steps, reporting routes, and legal remedies available […]