Companies should have action plans to defend against short-seller attacks

There's a limit to what regulations and the disclosure framework can do