All companies get breached; not all of them get breached via vulnerabilities that were known and patchable for two months prior to the breach being detected. Fu

All companies get breached; not all of them get breached via vulnerabilities that were known and patchable for two months prior to the breach being detected. Further, not all companies handle such large amounts of sensitive information. Equifax's IT staff should have known better, as a whole. I have seen it argued elsewhere on the internet that their CSO, who only had a degree in music, should not be blamed for the breach; I have also seen statements claiming that cross-field collaboration is important, and that many innovations have come from people working outside of their main field of study or from uneducated backgrounds. Neither of these statements excuses what happened. Further, I would argue that if the Equifax CSO were innovating in her field by bringing some sort of new insight to security, we would not be talking about aa breach.