On the issue of risk, the company can probably argue that they didn't think it was of significant risk so they didn't report it. They can appeal and get around the system that we're trying to put in place.
On February 19th, 2015. See this statement in context.