BSA requests to amend the Securities and Exchange Commission’s (SEC) Final Rule: Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by removing the requirement to disclose a material cyber incident within four business days. This change would improve cybersecurity and support your ongoing efforts to reduce regulatory burdens on American businesses.