Add Turing eval answer for statement 4.8.4

[edwardchalstrey1]

:white_check_mark: Checklist

• [x] This pull request has a meaningful title.
• [ ] If your changes are not yet ready to merge, you have marked this pull request as a draft pull request.

:ballot_box_with_check: Maintainers' checklist

• [x] This pull request has had the appropriate labels assigned
• [x] This pull request has been added to the SATRE backlog project board
• [x] This pull request has been assigned to one or more maintainers

:arrow_heading_up: Summary

Adds an answer in the Turing DSH evaluation for 4.8.4:

• Statement: "You should publicly share details of incidents, near misses, and mitigations in a timely fashion, in line with good practices for responsible disclosure."
• Guidance: "This may be via the TRE website or annual reports. Sharing this information is particularly important when a TRE holds public sector data."

Needed after this was added in #273 & #291

:raising_hand: Acknowledging contributors

• [x] All contributors to this pull request are already named in the table of contributors in the README file.
• [ ] The following people should be added to the table of contributors in the README file:

[edwardchalstrey1]

@martintoreilly @jemrobinson Do you agree with my answer?

[jemrobinson]

Seems fine. Do we think there should be a process for publicly sharing our incident reports?

[edwardchalstrey1]

Seems fine. Do we think there should be a process for publicly sharing our incident reports?

Well it is Recommended!

[manics]

If you want to change the spec to make it optional thats fine with me!

[edwardchalstrey1]

If you want to change the spec to make it optional thats fine with me!

Let's keep it recommended I'd say - this seems important for TREs with high sensitivity e.g. personally identifiable info