Companies would have to be truthful in providing this information because it is illegal to putfalse information in SEC filings, and, if the company had a breach and it was investigated, a full security program could not be pulled together in one or two days.