Public companies registered with the U.S. SEC will soon have to disclose material cybersecurity incidents and annually report material information regarding their cybersecurity risk management, strategy and governance.