When to Report a Cyberattack? For Companies, That’s Still a Dilemma

The S.E.C.’s updated cybersecurity guidance doesn’t confront the practical quandary facing public companies victimized by a cyberattack.