Is there an appeal/review process? So the primary issue the have is that their measures, whatever they were, were insufficient to prevent the hack. The defini

Is there an appeal/review process? So the primary issue the have is that their measures, whatever they were, were insufficient to prevent the hack. The definition of "accepted security standards," I think, is debatable in review if the defendant wants to argue that what they had was reasonable. Then they could actually argue their measures vs the Commissioner's ideas on their merits. Otherwise it reads -- to me, a layman in these things -- like the standard pontification you get out of a prosecutor when they're showing off to the press.