Specifically, Corp Fin wants companies to disclose types of risks, an explanation of how the security breach will affect business, the effect of a data breach (before, during, and after) on the company's financial performance, and a discussion of the adequacy of the company's internal controls and procedures.