... voluntarily disclosed in response to a reported cybersecurity incident but not when the SOC for Cybersecurity is proactively disclosed by management in the absence of a cybersecurity incident. This article highlights implications for audit practitioners, companies, and regulators. I thank Nicole S...