A new Securities and Exchange Commission (SEC) rule that requires companies to report a breach within four days of determining a material incident goes into effect today, and the industry has responded positively to a last-minute change that does not require companies to file the technical details of a breach.