SEC’s new cybersecurity rule and its impact on security operations