Although the municipal market is not subject to Rules, they offer helpful insight and guidance to its participants. The Rules provide municipal issuers and 501(c)(3) organizations with a valuable framework for drafting cybersecurity risk disclosure in offering documents. Additionally, the Rules provide guidance on drafting and implementing policies and procedures for responding to cyberattacks.