It's not only so much the system, the system is how a company works day-to-day and that is the operations of the company. Sometimes a company will even self-report on incidents or there will be reports following from PVIs or whatever.
That information, when it's disclosed to the government, is no longer protected. We have many members who have been fighting, for example, third party access to commercially sensitive information, that is included in those reports, from being divulged by the company.
For example, if I have a company and I report something to you, within six months or within a period of time, I could get a request from somebody to have access to the information, and I'm not allowed to know by whom the request has been filed. A lot of this information needs to be protected and it isn't in the current legislation.