SEC Provides New Guidance on Covid-Related Disclosures

Today, the SEC’s Division of Corporation Finance (CorpFin) provided new guidance related to disclosures companies should be making in light of the coronavirus (Covid-19) pandemic. The commission will also allow more time for public companies to submit mandatory filings, as long as the company clearly explains why it needs more time.

“These actions provide temporary, targeted relief to issuers, investment funds and investment advisers affected by Covid-19,” said SEC chairman Jay Clayton in a press release. “At the same time, we encourage public companies to provide current and forward-looking information to their investors and, in these uncertain times, companies are reminded that they can take steps to avail themselves of the safe harbor in Section 21E of the Exchange Act for forward-looking statements.”

Although the material impacts of the pandemic can be uncertain, the SEC is asking companies to disclose risks and related effects in Management Discussion and Analysis (MD&A) sections and business sections, as well as in the risk factors, legal proceedings, disclosure controls and procedures, internal control over financial reporting disclosures and financial statements sections as appropriate.

According to data from public company intelligence provider MyLogIQ, 41% of Russell 3000 companies had issued risk factor disclosures regarding Covid-19 by Monday, March 23. That’s up from 29% on March 11. For the S&P 500, the percentage had risen from 32% to 35% in the same time period.

Cyber Disclosures Raise Flurry of New Concerns

The largest companies are gradually telling investors more about the pains they’re taking to protect their own information as well as customers’ privacy. Yet some industries are reporting those efforts better than others, according to new studies.

A growing number of firms have fallen into step with last year’s guidance from the Securities and Exchange Commission to disclose their cyber-security risks and what management and the board are doing to address them. For instance, according to a report from the EY Center for Board Matters, more than half of Fortune 100 companies reported in 2019 proxy statements and annual reports that they sought to recruit new board members with cyber skills versus only 40% the year before.

Also, more companies have decided to place oversight of cyber risk in non-audit committees. It was 28% of the Fortune 100 this year compared to 21% in 2018. (Please see chart at the bottom.)