The enhanced regulatory scrutiny on corporate victims of cyberattacks — exemplified from the U.S. Securities and Exchange Commission's scenario from SolarWinds — should get replaced that has a new design that gives sufficient incentives for corporations to come back forward proactively and collaborate with regulation enforcement, say attorney