Goodstein: As soon as you know about [a crisis], you announce to the world what's going on, what the source is, what you're doing to handle it and what you're doing to make sure it won't happen again. Target did none of these things. They waited 20 days to say anything. They should have said, 'We want everybody to know about this, even though it wasn't our fault.' They should have said 'somebody has compromised our security system. It's not our fault.