Amazing that this isn't seen more as a strategic advantage, but the failure rate after a breach (90%) shows us that "survival of the fittest" will be the rule regardless of SEC involvement:
https://www.forbes.com/sites/forbestechcouncil/2023/02/06/90-of-boards-are-not-ready-for-sec-cyber-regulations/