SEC to Wall Street: Security incidents need disclosure

Companies should go public four days from incident discovery.

Source