Can't do that w/o talking about the cost of what you're going to do, and you can't do that w/o talking about the impact of the incident.

So you can elide some details when you talk to leadership, investors, and regulators, but you can't elide everything.