The increased regulatory scrutiny on corporate victims of cyberattacks — exemplified by the U.S. Securities and Trade Fee's circumstance in opposition to SolarWinds — ought to be replaced with a new model that gives satisfactory incentives for providers to come back forward proactively and collaborate with law enforcement, say attorneys at Mc