[grvdrm]

Smart response.

To add to your thinking

Stronger: How much stronger? How do you measure? How do you test?

Less Likely: How much less likely? And could it instead make them more likely to see attacks since they've been exposed.

It doesn't take much to lose sight of proper controls, processes, etc. Something simple like team turnover can cause something to be missed.

Also, re: transparency, it's going to be interesting to see how companies handle the SEC's new rule regarding material cybersecurity issues.

Clorox, as an example, has released multiple 8Ks recently as they continue to work through their August incident.

https://www.sec.gov/news/press-release/2023-139