STIGViewer Support

229.106(c)(2)(iii)

paragraph (action item)

Whether such persons or committees report information about such risks to the board of directors or a committee or subcommittee of the board of directors. Instruction 1 to Item 106(c): In the case of a foreign private issuer with a two-tier board of directors, for purposes of paragraph (c) of this section, the term “board of directors” means the supervisory or non-management board. In the case of a foreign private issuer meeting the requirements of § 240.10A-3(c)(3) of this chapter, for purposes of paragraph (c) of this Item, the term “board of directors” means the issuer's board of auditors (or similar body) or statutory auditors, as applicable. Instruction 2 to Item 106(c): Relevant expertise of management in Item 106(c)(2)(i) may include, for example: Prior work experience in cybersecurity; any relevant degrees or certifications; any knowledge, skills, or other background in cybersecurity.

229.106 (Item 106) Cybersecurity.

Related Frameworks

2 mappings across 4 frameworks
SCF2 mappings
GOV-01.1Steering Committee & Program Oversight
1.00
GOV-01.2Status Reporting To Governing Body
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (77) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00
IA-1Policy and Procedures
1.00
IR-1Policy and Procedures
1.00
MA-1Policy and Procedures
1.00
MP-1Policy and Procedures
1.00

+67 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-K Items 105 and 106: Risk Factors, and Cybersecurity (SEC Cybersecurity Disclosure Rule). Edition dated 2026-01-01. Read the publication.