4 ms·

> And, you do realize the CEO didn't actively facilitate the breech? As CEO he is responsible for his company. If a breech happens, it’s because he mismanaged

by Aaargh20318 9y ago

> And, you do realize the CEO didn't actively facilitate the breech? As CEO he is responsible for his company. If a breech happens, it’s because he mismanaged it. They take home huge salaries, stock options and other forms of compensation, supposedly because their job carries so much responsibility, then he should also take responsibility when the shit hits the fan. Not only should he not get a cent, every single dollar that the company loses as a result of this should be recovered from him. Bankrupt the fucker and have him live the rest of his days in a box under a bridge. You cannot claim ridiculous amounts of money because of your responsible job and then not be held responsible.

dogruck 9y ago
I agree that he is responsible. But his contract doesn't read, "if any big bad thing happens, we pay you $0!" That would surely be a great contract, but they would have a tough time hiring a CEO. By analysis, every landlord should put a "if anything really bad happens at this property, you are fully responsible."
- digitaltrees 9y ago
  Landlords often require renters insurance for this exact reason and definitely try to hold tenants liable for damage. Many states have laws to prevent landlords from doing exactly this.
  - dogruck 9y ago
    Right -- many states have laws to prevent landlords from writing such clauses.
- dingo_bat 9y ago
  > By analysis, every landlord should put a "if you burn the fucking house down, you are fully responsible." FTFY.
- Aaargh20318 9y ago
  > "if any big bad thing happens, we pay you $0!" No, it should read 'if big bad things happen, you pay us the damages'. The question is simple: Is the CEO (directly or indirectly) responsible for how the company operates ? If (s)he is, then it's fair (s)he gets a decent bonus when the company does well, but that would also mean they are responsible when everything goes south, and then they should pay for the damage. Otherwise they can basically take huge risks with the company in the hope they score a big bonus, and there will be no consequences when it goes tits up. You cannot only be responsible when things go well, that's not how responsibility works.
  - jusaduder 9y ago
    >No, it should read 'if big bad things happen, you pay us the damages'. It would be utterly ridiculous for any person to sign a contract that said "In the event this company gets hacked, you a personally liable." I wouldn't, and you wouldn't either.
    - subway 9y ago
      I did this frequently when I was a contractor/consultant. I also retained insurance to mitigate the risk to myself.
    - Aaargh20318 9y ago
      That's fine, but then you get a normal salary. If you claim you are responsible for the performance of the company, that goes both ways. You can't claim responsibility ONLY when things go well (and rake in large amounts of cash) and then when things go to shit suddenly act like you had nothing to do with it.
      - dogruck 9y ago
        Such a contract would attract charlatains -- guys like Bernie Madoff. And then, when they found a data breech, they'd pull every trick to keep it hidden. No doubt that CEOs should be held responsible. And here the board would say, yes, that's why we fired him.
FatherCadan 9y ago
Where is the CIO/CTO in all of this? Would we expect a US President (or any Chief Executive of any country) to understand the importance of two-factor authentication? Or to audit his Nuclear Football? How many breaches of the VA occurred and we do not blame the President. We do criticize the response to these breeches and this CEO's response is "Thanks for all the fish," but we do tend to like it when heads roll; so I have no idea who is to actually be blamed and I think it is unreasonable to even begin assessing blame at this time.
- Aaargh20318 9y ago
  > Would we expect a US President (or any Chief Executive of any country) to understand the importance of two-factor authentication? No, but I would expect him/her to hire competent people who do. Either you are responsible for the performance of the company or you aren't. If you are you can be richly rewarded when it performs well, but that should also include penalties when you fuck up.

dogruck 9y ago

I agree that he is responsible. But his contract doesn't read, "if any big bad thing happens, we pay you $0!" That would surely be a great contract, but they would have a tough time hiring a CEO. By analysis, every landlord should put a "if anything really bad happens at this property, you are fully responsible."

digitaltrees 9y ago
Landlords often require renters insurance for this exact reason and definitely try to hold tenants liable for damage. Many states have laws to prevent landlords from doing exactly this.
- dogruck 9y ago
  Right -- many states have laws to prevent landlords from writing such clauses.
dingo_bat 9y ago
> By analysis, every landlord should put a "if you burn the fucking house down, you are fully responsible." FTFY.
Aaargh20318 9y ago
> "if any big bad thing happens, we pay you $0!" No, it should read 'if big bad things happen, you pay us the damages'. The question is simple: Is the CEO (directly or indirectly) responsible for how the company operates ? If (s)he is, then it's fair (s)he gets a decent bonus when the company does well, but that would also mean they are responsible when everything goes south, and then they should pay for the damage. Otherwise they can basically take huge risks with the company in the hope they score a big bonus, and there will be no consequences when it goes tits up. You cannot only be responsible when things go well, that's not how responsibility works.
- jusaduder 9y ago
  >No, it should read 'if big bad things happen, you pay us the damages'. It would be utterly ridiculous for any person to sign a contract that said "In the event this company gets hacked, you a personally liable." I wouldn't, and you wouldn't either.
  - subway 9y ago
    I did this frequently when I was a contractor/consultant. I also retained insurance to mitigate the risk to myself.
  - Aaargh20318 9y ago
    That's fine, but then you get a normal salary. If you claim you are responsible for the performance of the company, that goes both ways. You can't claim responsibility ONLY when things go well (and rake in large amounts of cash) and then when things go to shit suddenly act like you had nothing to do with it.
    - dogruck 9y ago
      Such a contract would attract charlatains -- guys like Bernie Madoff. And then, when they found a data breech, they'd pull every trick to keep it hidden. No doubt that CEOs should be held responsible. And here the board would say, yes, that's why we fired him.

FatherCadan 9y ago

Where is the CIO/CTO in all of this? Would we expect a US President (or any Chief Executive of any country) to understand the importance of two-factor authentication? Or to audit his Nuclear Football? How many breaches of the VA occurred and we do not blame the President. We do criticize the response to these breeches and this CEO's response is "Thanks for all the fish," but we do tend to like it when heads roll; so I have no idea who is to actually be blamed and I think it is unreasonable to even begin assessing blame at this time.

Aaargh20318 9y ago
> Would we expect a US President (or any Chief Executive of any country) to understand the importance of two-factor authentication? No, but I would expect him/her to hire competent people who do. Either you are responsible for the performance of the company or you aren't. If you are you can be richly rewarded when it performs well, but that should also include penalties when you fuck up.