punished by being made to give a presentation on how they automated the process, what poor security practices allowed them to pull it off, and recommendations f

punished by being made to give a presentation on how they automated the process, what poor security practices allowed them to pull it off, and recommendations for preventing a similar incident in the future So punish them by sending them to DefCon?