When a Cyber breach occurs, a company is required to disclose and report the extent of the breach, individuals affected and its steps