SEC guidance gives tipsters reason to believe that by flagging a cybersecurity issue, they would also be highlighting a securities violation. SEC guidance gives tipsters reason to believe that by flagging a cybersecurity issue, they would also be highlighting a securities violation. The securities regulator issued guidance in February on how companies should handle cybersecurity issues. Just reporting problems in-house at work isn’t enough, so whistleblowers are now more likely to go to the agency, said Mr. Keating. To ease the path for workers to raise concerns internally, companies should open multiple channels for reporting, Mr. Keating said.

Source: Wall Street Journal May 15, 2018 16:59 UTC