SEC Division of Corporation Finance Director Erik Gerding countered notions that the SEC rules prohibit companies from sharing information about material cybersecurity incidents with others and reminded companies of the ways in which information can be shared in a manner consistent with Regulation FD or one of its exclusions.