Jacob Olcott, vice president for security ratings firm BitSight, said the report and short-sale signal potential SEC intervention. That agency has five-year-old guidance that requires companies to disclose cybersecurity risks to their investors, and “any reasonable read of the guidance suggests that manufactured devices fall under the concept SEC laid out,” says Olcott, a former Senate legal counselor.
