Another round of navel gazing and arguing over the best way to self-promote from the security industry talking heads? Color me shocked.

More seriously, some people disclose privately, some people disclose publicly, others don't disclose. What value does a standardized take on disclosure add to the security industry?