The SEC has issued new cybersecurity risk management requirements. The requirements will apply to sectors collectively labeled as "Market Entities".