Subpart 229.100 — Business
229.101 — (Item 101) Description of business.
(a) General development of business. Describe the general development of
the business of the registrant, its subsidiaries, and any predecessor(s).
(1) In describing developments, only information material to an understanding of
the general development of the business is required. Disclosure may include, but
should not be limited to, the following topics:
(i) Any material changes to a previously disclosed business strategy;
(ii) The nature and effects of any material bankruptcy, receivership, or
any similar proceeding with respect to the registrant or any of its significant
subsidiaries;
(iii) The nature and effects of any material reclassification, merger or
consolidation of the registrant or any of its significant subsidiaries; and
(iv) The acquisition or disposition of any material amount of assets
otherwise than in the ordinary course of business.
(2) Notwithstanding the provisions of § 230.411(b) or § 240.12b-23(a) of this
chapter, as applicable, a registrant may only forgo providing a full discussion of
the general development of its business for a filing other than an initial
registration statement if it provides an update to the general development of its
business, disclosing all of the material developments that have occurred since the
most recent registration statement or report that includes a full discussion of the
general development of its business. In addition, the registrant must incorporate by
reference, and include one active hyperlink to one registration statement or report
that includes, the full discussion of the general development of registrant's
business.
(3) Registrants:
(i) Filing a registration statement on Form S-1 (§ 239.11 of this chapter) under the Securities Act or on Form 10 (§ 249.210 of this chapter) under the Exchange Act;
(ii) Not subject to the reporting requirements of section 13(a) or 15(d) of the Exchange Act immediately before the filing of such registration statement; and
(iii) That (including predecessors) have not received revenue from operations during each of the three fiscal years immediately before the filing of such registration statement, shall provide the following information:
(A) If the registration statement is filed prior to the end of the registrant's second fiscal quarter, a description of the registrant's plan of operation for the remainder of the fiscal year; or
(B) If the registration statement is filed subsequent to the end of the registrant's second fiscal quarter, a descripition of the registrant's plan of operation for the remainder of the fiscal year and for the first six months of the next fiscal year. If such information is not available, the reasons for its not being available shall be stated. Disclosure relating to any plan shall include such matters as:
(1) In the case of a registration statement on Form S-1, a statement in narrative form indicating the registrant's opinion as to the period of time that the proceeds from the offering will satisfy cash requirements and whether in the next six months it will be necessary to raise additional funds to meet the expenditures required for operating the business of the registrant; the specific reasons for such opinion shall be set forth and categories of expenditures and sources of cash resources shall be identified; however, amounts of expenditures and cash resources need not be provided; in addition, if the narrative statement is based on a cash budget, such budget shall be furnished to the Commission as supplemental information, but not as part of the registration statement;
(2) An explanation of material product research and development to be performed during the period covered in the plan;
(3) Any anticipated material acquisition of plant and equipment and the capacity thereof;
(4) Any anticipated material changes in number of employees in the various departments such as research and development, production, sales or administration; and
(5) Other material areas which may be peculiar to the registrant's business.
(b) [Reserved]
(c) Description of business. (1) Describe the business done and intended
to be done by the registrant and its subsidiaries, focusing upon the registrant's
dominant segment or each reportable segment about which financial information is
presented in the financial statements. When describing each segment, only
information material to an understanding of the business taken as a whole is
required. Disclosure may include, but should not be limited to, the information
specified in paragraphs (c)(1)(i) through (v) of this section.
(i) Revenue-generating activities, products and/or services, and any dependence
on revenue-generating activities, key products, services, product families or
customers, including governmental customers;
(ii) Status of development efforts for new or enhanced products, trends in
market demand and competitive conditions;
(iii) Resources material to a registrant's business, such as:
(A) Sources and availability of raw materials; and
(B) The duration and effect of all patents, trademarks, licenses, franchises, and
concessions held;
(iv) A description of any material portion of the business that may be subject to
renegotiation of profits or termination of contracts or subcontracts at the election
of the Government; and
(v) The extent to which the business is or may be seasonal.
(2) Discuss the information specified in paragraphs (c)(2)(i) and (ii) of this
section with respect to, and to the extent material to an understanding of, the
registrant's business taken as a whole, except that, if the information is material
to a particular segment, you should additionally identify that segment.
(i) The material effects that compliance with government regulations, including
environmental regulations, may have upon the capital expenditures, earnings and
competitive position of the registrant and its subsidiaries, including the estimated
capital expenditures for environmental control facilities for the current fiscal
year and any other material subsequent period; and
(ii) A description of the registrant's human capital resources, including the number
of persons employed by the registrant, and any human capital measures or objectives
that the registrant focuses on in managing the business (such as, depending on the
nature of the registrant's business and workforce, measures or objectives that
address the development, attraction and retention of personnel).
(d) [Reserved]
(e) Available information. Disclose the information in paragraphs (e)(1), (e)(2) and (e)(3) of this section in any registration statement you file under the Securities Act (15 U.S.C. 77a et seq.), and disclose the information in paragraph (e)(3) of this section in your annual report on Form 10-K (§ 249.310 of this chapter). Further disclose the information in paragraph (e)(4) of this section if you are an accelerated filer or a large accelerated filer (as defined in § 240.12b-2 of this chapter) filing an annual report on Form 10-K (§ 249.310 of this chapter):
(1) Whether you file reports with the Securities and Exchange Commission. If you are a reporting company, identify the reports and other information you file with the SEC.
(2) State that the SEC maintains an internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC and state the address of that site http://www.sec.gov).
(3) Disclose your internet address, if you have one.
(4)(i) Whether you make available free of charge on or through your Internet website, if you have one, your annual report on Form 10-K, quarterly reports on Form 10-Q (§ 249.308a of this chapter), current reports on Form 8-K (§ 249.308 of this chapter), and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act (15 U.S.C. 78m(a) or 78o(d)) as soon as reasonably practicable after you electronically file such material with, or furnish it to, the SEC;
(ii) If you do not make your filings available in this manner, the reasons you do not do so (including, where applicable, that you do not have an Internet website); and
(iii) If you do not make your filings available in this manner, whether you voluntarily will provide electronic or paper copies of your filings free of charge upon request.
(f) Reports to security holders. Disclose the following information in any registration statement you file under the Securities Act:
(1) If the SEC's proxy rules or regulations, or stock exchange requirements, do not require you to send an annual report to security holders or to holders of American depository receipts, describe briefly the nature and frequency of reports that you will give to security holders. Specify whether the reports that you give will contain financial information that has been examined and reported on, with an opinion expressed “by” an independent public or certified public accountant.
(2) For a foreign private issuer, if the report will not contain financial information prepared in accordance with U.S. generally accepted accounting principles, you must state whether the report will include a reconciliation of this information with U.S. generally accepted accounting principles.
(g) Enforceability of civil liabilities against foreign persons. Disclose the following if you are a foreign private issuer filing a registration statement under the Securities Act:
(1) Whether or not investors may bring actions under the civil liability provisions of the U.S. Federal securities laws against the foreign private issuer, any of its officers and directors who are residents of a foreign country, any underwriters or experts named in the registration statement that are residents of a foreign country, and whether investors may enforce these civil liability provisions when the assets of the issuer or these other persons are located outside of the United States. The disclosure must address the following matters:
(i) The investor's ability to effect service of process within the United States on the foreign private issuer or any person;
(ii) The investor's ability to enforce judgments obtained in U.S. courts against foreign persons based upon the civil liability provisions of the U.S. Federal securities laws;
(iii) The investor's ability to enforce, in an appropriate foreign court, judgments of U.S. courts based upon the civil liability provisions of the U.S. Federal securities laws; and
(iv) The investor's ability to bring an original action in an appropriate foreign court to enforce liabilities against the foreign private issuer or any person based upon the U.S. Federal securities laws.
(2) If you provide this disclosure based on an opinion of counsel, name counsel in the prospectus and file as an exhibit to the registration statement a signed consent of counsel to the use of its name and opinion.
(h) Smaller reporting companies. A smaller reporting company, as defined
by § 229.10(f)(1), may satisfy its obligations under this Item by describing the
development of its business pursuant to this paragraph (h). In describing
developments under paragraphs (h)(1) through (3), information should be provided for
the period of time that is material to an understanding of the general development
of the business. Notwithstanding the provisions of § 230.411(b) or § 240.12b-23(a)
of this chapter as applicable, a smaller reporting company may only forgo providing
a full discussion of the general development of its business for a filing other than
an initial registration statement if it provides an update to the general
development of its business disclosing all of the material developments that have
occurred since the most recent registration statement or report that includes a full
discussion of the general development of its business. In addition, the smaller
reporting company must incorporate by reference, and include one active hyperlink to
one registration statement or report that includes, the full discussion of the
general development of the registrant's business. If the smaller reporting company
has not been in business for three years, provide the same information for
predecessor(s) of the smaller reporting company if there are any. This business
development description should include:
(1) Form and year of organization;
(2) Any bankruptcy, receivership or similar proceeding; and
(3) Any material reclassification, merger, consolidation, or purchase or sale of a significant amount of assets not in the ordinary course of business.
(4) Business of the smaller reporting company. Briefly describe the business and include, to the extent material to an understanding of the smaller reporting company:
(i) Principal products or services and their markets;
(ii) Distribution methods of the products or services;
(iii) Status of any publicly announced new product or service;
(iv) Competitive business conditions and the smaller reporting company's competitive position in the industry and methods of competition;
(v) Sources and availability of raw materials and the names of principal suppliers;
(vi) Dependence on one or a few major customers;
(vii) Patents, trademarks, licenses, franchises, concessions, royalty agreements or labor contracts, including duration;
(viii) Need for any government approval of principal products or services. If government approval is necessary and the smaller reporting company has not yet received that approval, discuss the status of the approval within the government approval process;
(ix) Effect of existing or probable governmental regulations on the business;
(x) [Reserved]
(xi) Costs and effects of compliance with environmental laws (federal, state and local); and
(xii) Number of total employees and number of full-time employees.
(5) Reports to security holders. Disclose the following in any registration statement you file under the Securities Act of 1933:
(i) If you are not required to deliver an annual report to security holders, whether you will voluntarily send an annual report and whether the report will include audited financial statements;
(ii) Whether you file reports with the Securities and Exchange Commission. If you are a reporting company, identify the reports and other information you file with the Commission; and
(iii) State that the Commission maintains an internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the Commission and state the address of that site (http://www.sec.gov). Disclose your internet address, if available.
(6) Foreign issuers. Provide the information required by Item 101(g) of Regulation S-K (§ 229.101(g)).
Instructions to Item 101: 1. In determining what information about the segments is material to an understanding of the registrant's business taken as a whole and therefore required to be disclosed, pursuant to paragraph (c) of this Item, the registrant should take into account both quantitative and qualitative factors such as the significance of the matter to the registrant (e.g., whether a matter with a relatively minor impact on the registrant's business is represented by management to be important to its future profitability), the pervasiveness of the matter (e.g., whether it affects or may affect numerous items in the segment information), and the impact of the matter (e.g., whether it distorts the trends reflected in the segment information). Situations may arise when information should be disclosed about a segment, although the information in quantitative terms may not appear significant to the registrant's business taken as a whole.
2. Base the determination of whether information about segments is required for a particular year upon an evaluation of interperiod comparability. For instance, interperiod comparability would require a registrant to report segment information in the current period even if not material under the criteria for reportability of FASB ASC Topic 280, Segment Reporting, if a segment has been significant in the immediately preceding period and the registrant expects it to be significant in the future.
3. The Commission, upon written request of the registrant and where consistent with the protection of investors, may permit the omission of any of the information required by this Item or the furnishing in substitution thereof of appropriate information of comparable character.
[47 FR 11401, Mar. 16, 1982, as amended at 63 FR 6381, Feb. 6, 1998; 64 FR
1734, Jan. 12, 1999; 67 FR 58504, Sept. 16, 2002; 70 FR 76641, Dec. 27, 2005; 73
FR 957, Jan. 4, 2008; 76 FR 50120, Aug. 12, 2011; 83 FR 50148, Oct. 4, 2018; 85
FR 63726, Oct. 8, 2020]
229.102 — (Item 102) Description of property.
To the extent material, disclose the location and general character of the registrant's principal physical properties. In addition, identify the segment(s), as reported in the financial statements, that use the properties described. If any such property is not held in fee or is held subject to an encumbrance that is material to the registrant, so state and describe briefly how held.
Instruction 1 to Item 102: This item requires information that will reasonably inform investors as to the suitability, adequacy, productive capacity, and extent of utilization of the principal physical properties of the registrant and its subsidiaries, to the extent the described properties are material. A registrant should engage in a comprehensive consideration of the materiality of its properties. If appropriate, descriptions may be provided on a collective basis; detailed descriptions of the physical characteristics of individual properties or legal descriptions by metes and bounds are not required and shall not be given.
Instruction 2 to Item 102: In determining materiality under this Item, the registrant should take into account both quantitative and qualitative factors. See Instruction 1 to Item 101 of Regulation S-K (§ 229.101).
Instruction 3 to Item 102: Registrants engaged in mining operations must refer to and, if required, provide the disclosure under §§ 229.1300 through 229.1305 (subpart 1300 of Regulation S-K), in addition to any disclosure required by this section.
Instruction 4 to Item 102: A registrant engaged in oil and gas producing activities shall provide the information required by Subpart 1200 of Regulation S-K.
Instruction 5 to Item 102: The definitions in § 210.4-10(a) of Regulation S-X [17 CFR 210] shall apply to this Item with respect to oil and gas operations.
Instruction 6 to Item 102: The attention of certain issuers engaged in oil and gas producing activities is directed to the information called for in Securities Act Industry Guide 4 (referred to in § 229.801(d)).
Instruction 7 to Item 102: The attention of issuers engaged in real estate activities is directed to the information called for in Guide 5 (§ 229.801(e) of this chapter).
[47 FR 11401, Mar. 16, 1982, as amended at 64 FR 1735, Jan. 12, 1999; 73 FR 957, Jan. 4, 2008; 74 FR 2193, Jan. 14, 2009; 83 FR 66344, Dec. 26, 2018; 84 FR 12674, Apr. 2, 2019]
229.103 — (Item 103) Legal proceedings.
(a) Describe briefly any material pending legal proceedings, other than ordinary
routine litigation incidental to the business, to which the registrant or any of its
subsidiaries is a party or of which any of their property is the subject. Include
the name of the court or agency in which the proceedings are pending, the date
instituted, the principal parties thereto, a description of the factual basis
alleged to underlie the proceedings and the relief sought. Include similar
information as to any such proceedings known to be contemplated by governmental
authorities. Information may be provided by hyperlink or cross-reference to legal
proceedings disclosure elsewhere in the document, such as in Management's Discussion
& Analysis (MD&A), Risk Factors and notes to the financial statements.
(b) No information need be given under this section for proceedings:
(1) That involve negligence or other claims or actions if the business ordinarily
results in such claims or actions, unless the claim or action departs from the
normal kind of such claims or actions; or
(2) That involve primarily a claim for damages if the amount involved, exclusive of
interest and costs, does not exceed 10 percent of the current assets of the
registrant and its subsidiaries on a consolidated basis. However, if any proceeding
presents in large degree the same legal or factual issues as other proceedings
pending or known to be contemplated, the amount involved in such other proceedings
shall be included in computing such percentage.
(c) Notwithstanding paragraph (b) of this section, disclosure under this section
shall include, but shall not be limited to:
(1) Any material bankruptcy, receivership, or similar proceeding with respect to the
registrant or any of its significant subsidiaries;
(2) Any material proceedings to which any director, officer or affiliate of the
registrant, any owner of record or beneficially of more than five percent of any
class of voting securities of the registrant, or any associate of any such director,
officer, affiliate of the registrant, or security holder is a party adverse to the
registrant or any of its subsidiaries or has a material interest adverse to the
registrant or any of its subsidiaries;
(3) Administrative or judicial proceedings (including proceedings which present in
large degree the same issues) arising under any Federal, State, or local provisions
that have been enacted or adopted regulating the discharge of materials into the
environment or primarily for the purpose of protecting the environment. Such
proceedings shall not be deemed “ordinary routine litigation incidental to the
business” and shall be described if:
(i) Such proceeding is material to the business or financial condition of the
registrant;
(ii) Such proceeding involves primarily a claim for damages, or involves potential
monetary sanctions, capital expenditures, deferred charges or charges to income and
the amount involved, exclusive of interest and costs, exceeds 10 percent of the
current assets of the registrant and its subsidiaries on a consolidated basis;
or
(iii) A governmental authority is a party to such proceeding and such proceeding
involves potential monetary sanctions, unless the registrant reasonably believes
that such proceeding will result in no monetary sanctions, or in monetary sanctions,
exclusive of interest and costs, of less than $300,000 or, at the election of the
registrant, such other threshold that (A) the registrant determines is reasonably
designed to result in disclosure of any such proceeding that is material to the
business or financial condition is disclosed, (B) the registrant discloses
(including any change thereto) in each annual and quarterly report, and (C) does not
exceed the lesser of $1 million or one percent of the current assets of the
registrant and its subsidiaries on a consolidated basis; provided, however, that
such proceedings that are similar in nature may be grouped and described
generically.
[85 FR 63726, Oct. 8, 2020]
229.104 — (Item 104) Mine safety disclosure.
(a) A registrant that is the operator, or that has a subsidiary that is an operator, of a coal or other mine shall provide the information specified below for the time period covered by the report:
(1) For each coal or other mine of which the registrant or a subsidiary of the registrant is an operator, identify the mine and disclose:
(i) The total number of violations of mandatory health or safety standards that could significantly and substantially contribute to the cause and effect of a coal or other mine safety or health hazard under section 104 of the Federal Mine Safety and Health Act of 1977 (30 U.S.C. 814) for which the operator received a citation from the Mine Safety and Health Administration.
(ii) The total number of orders issued under section 104(b) of such Act (30 U.S.C. 814(b)).
(iii) The total number of citations and orders for unwarrantable failure of the mine operator to comply with mandatory health or safety standards under section 104(d) of such Act (30 U.S.C. 814(d)).
(iv) The total number of flagrant violations under section 110(b)(2) of such Act (30 U.S.C. 820(b)(2)).
(v) The total number of imminent danger orders issued under section 107(a) of such Act (30 U.S.C. 817(a)).
(vi) The total dollar value of proposed assessments from the Mine Safety and Health Administration under such Act (30 U.S.C. 801 et seq.).
Instruction to Item 104(a)(1)(vi): Registrants must provide the total dollar value of assessments proposed by MSHA relating to any type of violation during the period covered by the report, regardless of whether the registrant has challenged or appealed the assessment.
(vii) The total number of mining-related fatalities.
Instruction to Item 104(a)(1)(vii): Registrants must report all fatalities occurring at a coal or other mine during the period covered by the report unless the fatality has been determined by MSHA to be unrelated to mining activity.
(2) A list of coal or other mines, of which the registrant or a subsidiary of the registrant is an operator, that receive written notice from the Mine Safety and Health Administration of:
(i) A pattern of violations of mandatory health or safety standards that are of such nature as could have significantly and substantially contributed to the cause and effect of coal or other mine health or safety hazards under section 104(e) of such Act (30 U.S.C. 814(e)); or
(ii) The potential to have such a pattern.
(3) Any pending legal action before the Federal Mine Safety and Health Review Commission involving such coal or other mine.
Instruction to Item 104(a)(3): The registrant must report the total number of legal actions that were pending before the Federal Mine Safety and Health Review Commission as of the last day of the time period covered by the report, as well as the aggregate number of legal actions instituted and the aggregate number of legal actions resolved during the reporting period. With respect to the total number of legal actions that were pending before the Federal Mine Safety and Health Review Commission as of the last day of the time period covered by the report, the registrant must also report the number of such legal actions that are:
1. Contests of citations and orders referenced in Subpart B of 29 CFR part 2700;
2. Contests of proposed penalties referenced in Subpart C of 29 CFR part 2700;
3. Complaints for compensation referenced in Subpart D of 29 CFR part 2700;
4. Complaints of discharge, discrimination or interference referenced in Subpart E of 29 CFR part 2700;
5. Applications for temporary relief referenced in Subpart F of 29 CFR part 2700; and
6. Appeals of judges' decisions or orders to the Federal Mine Safety and Health Review Commission referenced in Subpart H of 29 CFR part 2700.
(b) Definitions. For purposes of this Item:
(1) The term coal or other mine means a coal or other mine, as defined in section 3 of the Federal Mine Safety and Health Act of 1977 (30 U.S.C. 802), that is subject to the provisions of such Act (30 U.S.C. 801 et seq.).
(2) The term operator has the meaning given the term in section 3 of the Federal Mine Safety and Health Act of 1977 (30 U.S.C. 802).
(3) The term subsidiary has the meaning given the term in Exchange Act Rule 12b-2 (17 CFR 240.12b-2).
Instructions to Item 104: 1. The registrant must provide the information required by this Item as specified by § 229.601(b)(95) of this chapter. In addition, the registrant must provide a statement, in an appropriately captioned section of the periodic report, that the information concerning mine safety violations or other regulatory matters required by Section 1503(a) of the Dodd-Frank Wall Street Reform and Consumer Protection Act and this Item is included in exhibit 95 to the periodic report.
2. When the disclosure required by this item is included in an exhibit to an annual report on Form 10-K, the information is to be provided for the registrant's fiscal year.
[76 FR 81782, Dec. 28, 2011]
229.105 — (Item 105) Risk factors.
(a) Where appropriate, provide under the caption “Risk Factors” a discussion of
the material factors that make an investment in the registrant or offering
speculative or risky. This discussion must be organized logically with relevant
headings and each risk factor should be set forth under a subcaption that
adequately describes the risk. The presentation of risks that could apply
generically to any registrant or any offering is discouraged, but to the extent
generic risk factors are presented, disclose them at the end of the risk factor
section under the caption “General Risk Factors.”
(b) Concisely explain how each risk affects the registrant or the securities
being offered. If the discussion is longer than 15 pages, include in the
forepart of the prospectus or annual report, as applicable, a series of concise,
bulleted or numbered statements that is no more than two pages summarizing the
principal factors that make an investment in the registrant or offering
speculative or risky. If the risk factor discussion is included in a
registration statement, it must immediately follow the summary section required
by § 229.503 (Item 503 of Regulation S-K). If you do not include a summary
section, the risk factor section must immediately follow the cover page of the
prospectus or the pricing information section that immediately follows the cover
page. Pricing information means price and price-related information that you may
omit from the prospectus in an effective registration statement based on Rule
430A (§ 230.430A of this chapter). The registrant must furnish this information
in plain English. See § 230.421(d) of Regulation C of this chapter.
[84 FR 12674, Apr. 2, 2019; as amended at 85 FR 63726, Oct. 8, 2020]
229.106 — (Item 106) Cybersecurity.
(a) Definitions. For purposes of this section:
Cybersecurity incident means an unauthorized occurrence, or a series of
related unauthorized occurrences, on or conducted through a registrant's
information systems that jeopardizes the confidentiality, integrity, or
availability of a registrant's information systems or any information residing
therein.
Cybersecurity threat means any potential unauthorized occurrence on or
conducted through a registrant's information systems that may result in adverse
effects on the confidentiality, integrity, or availability of a registrant's
information systems or any information residing therein.
Information systems means electronic information resources, owned or used
by the registrant, including physical or virtual infrastructure controlled by
such information resources, or components thereof, organized for the collection,
processing, maintenance, use, sharing, dissemination, or disposition of the
registrant's information to maintain or support the registrant's operations.
(b) Risk management and strategy. (1) Describe the registrant's processes,
if any, for assessing, identifying, and managing material risks from
cybersecurity threats in sufficient detail for a reasonable investor to
understand those processes. In providing such disclosure, a registrant should
address, as applicable, the following non-exclusive list of disclosure
items:
(i) Whether and how any such processes have been integrated into the registrant's
overall risk management system or processes;
(ii) Whether the registrant engages assessors, consultants, auditors, or other
third parties in connection with any such processes; and
(iii) Whether the registrant has processes to oversee and identify such risks
from cybersecurity threats associated with its use of any third-party service
provider.
(2) Describe whether any risks from cybersecurity threats, including as a result
of any previous cybersecurity incidents, have materially affected or are
reasonably likely to materially affect the registrant, including its business
strategy, results of operations, or financial condition and if so, how.
(c) Governance. (1) Describe the board of directors' oversight of risks
from cybersecurity threats. If applicable, identify any board committee or
subcommittee responsible for the oversight of risks from cybersecurity threats
and describe the processes by which the board or such committee is informed
about such risks.
(2) Describe management's role in assessing and managing the registrant's
material risks from cybersecurity threats. In providing such disclosure, a
registrant should address, as applicable, the following non-exclusive list of
disclosure items:
(i) Whether and which management positions or committees are responsible for
assessing and managing such risks, and the relevant expertise of such persons or
members in such detail as necessary to fully describe the nature of the
expertise;
(ii) The processes by which such persons or committees are informed about and
monitor the prevention, detection, mitigation, and remediation of cybersecurity
incidents; and
(iii) Whether such persons or committees report information about such risks to
the board of directors or a committee or subcommittee of the board of
directors.
Instruction 1 to Item 106(c): In the case of a foreign private issuer with
a two-tier board of directors, for purposes of paragraph (c) of this section,
the term “board of directors” means the supervisory or non-management board. In
the case of a foreign private issuer meeting the requirements of
§ 240.10A–3(c)(3) of this chapter, for purposes of paragraph (c) of this Item,
the term “board of directors” means the issuer's board of auditors (or similar
body) or statutory auditors, as applicable.
Instruction 2 to Item 106(c): Relevant expertise of management in Item
106(c)(2)(i) may include, for example: Prior work experience in cybersecurity;
any relevant degrees or certifications; any knowledge, skills, or other
background in cybersecurity.
(d) Structured Data Requirement. Provide the information required by this
Item in an Interactive Data File in accordance with Rule 405 of Regulation S–T
and the EDGAR Filer Manual.
[88 FR 51896, Aug. 4, 2023]