The increased regulatory scrutiny on corporate victims of cyberattacks — exemplified from the U.S. Securities and Trade Commission's circumstance against SolarWinds — really should be replaced that has a new model that provides suitable incentives for businesses to come forward proactively and collaborate with legislation enforcement, say att