Cyberfiduciary: Navigating SEC Mandates for Cybersecurity

Cybersecurity is no longer an IT issue—it is a fiduciary responsibility.

The SEC’s cybersecurity disclosure rules require public companies to report material cyber incidents within four business days and disclose how boards oversee cyber risk and governance.

Cyberfiduciary is a concise, board-level guide for directors, executives, audit committees, and legal leaders navigating this new accountability. The book translates cyber risk into governance frameworks, disclosure-ready processes, and defensible oversight—helping boards protect enterprise value, investor trust, and regulatory credibility in an increasingly digital economy.

Cristina Dolan is a technology and cybersecurity executive who has served as an independent director on public company boards, including as audit committee chair and board-level cybersecurity and ESG expert. An MIT alumna, MIT Cybersecurity Fellow, and FBI InfraGard member, she advises directors and executives on cybersecurity governance.

Seth James Nielson, PhD, is the Founder and CEO of Crimson Vista, Inc., where he scales a 25-year career in software engineering and cybersecurity into strategic governance and forensic solutions. A former researcher at Johns Hopkins and current faculty at UT Austin, he has led over 100 forensic investigations and authored multiple books on cryptography and cybersecurity.