The cybersecurity disclosure rule, implemented two years ago, requires public companies to report material cyber incidents within four business days. While aimed at enhancing transparency…