This is a great white paper on ESG type reporting for cyber resilience.  The trick, however, will be to balance transparency with vulnerability exposure.