Now only a few states lack laws that require notification of security ... Despite this expectation to report findings almost as soon as a security incident becomes known, it is advisable to ...