According to the SEC, the proposed amendments are intended to better inform investors about a registrant’s risk management, strategy and governance related to cybersecurity and to provide timely notification to investors of material cybersecurity incidents.