The U.S. Securities and Exchange Commission is looking at extending cyber risk management rules to third-party providers and requiring more public company disclosure when there is a security breach. These…