> ...it is of course possible that there are other issues with process and governance that are coming into play. Likely, but shouldn’t the director of informat

> ...it is of course possible that there are other issues with process and governance that are coming into play. Likely, but shouldn’t the director of information security be given more power to take action? I’d think that if that was my title for an outfit like Panera, and if I couldn’t enact any kind of change in face of a fairly serious vulnerability in the span of eight months, I would resign from said position. Because what’s the point of my job, if that’s what I’m dealing with?