Forthright and full disclosure can soften the blow of even the most damaging security incident, but failing to meet ...