Skip to content
?
Cyber Interview Questions
?
Questions
Quiz
Interview
Guides
Search
Home
Quiz
GRC / Compliance Analyst
Quiz for
GRC / Compliance Analyst
1 / 12
30s · 0 pts
You are the CISO of a US-listed company and just concluded a ransomware incident is material. What does the SEC expect and when?
1
Disclose to the SEC within four business days of discovering the incident, whether or not it has been judged material.
2
File an 8-K Item 1.05 about four business days after the materiality determination; only an Attorney General finding allows delay.
3
Notify only affected customers; SEC disclosure applies to financial restatements, not cybersecurity incidents.
4
Wait until forensics finishes and the incident is fully contained, then disclose in the next 10-Q whenever it falls.
Tip: press 1–4 to answer, Enter for next.