The rule will include key details on the "most ambitious cybersecurity conformity initiative ever attempted,”