Cybersecurity compliance, already an anxiety-inducing topic for many in-house counsel, is about to get even trickier.

The U.S. Securities and Exchange Commission last week rolled out a host of proposed new cybersecurity rules for public companies, including a requirement to disclose material cybersecurity incidents within four days.