Financial authorities’ CIR requirements must align with clear and purposeful policy objectives. This is key because the policy objective determines what type of information a financial authority needs/asks for and what type of information a financial institution should provide. For example, if the financial authorities’ intent is early warning, then financial institutions might only be required to notify the financial authority with high level incident information.