SEC brings Cybersecurity Enforcement for internal control failures

RRD’s cybersecurity incident disclosure controls were ineffective in promptly delivering all pertinent information to management for decision-making, lacking clear guidance for reporting personnel. Their incident response policies did not set clear priorities or provide sufficient procedures for internal or MSSP personnel…