It should not just be an exercise in reporting but also an opportunity for organisations to consider what they are going to do about it....