Using our CompanyIQ® corporate governance database, we analyzed the DEF 14A proxy disclosures of S&P 500 companies to identify how they are managing cybersecurity risk. With the SEC’s proposed rules for enhanced cybersecurity management disclosures in the public comment period until May 9, 2022, the data in our report may help benchmark best practices.