I think about this every time I take my corporate CYA training - the courses you have to take every year to ensure you follow security protocols, don't break th

I think about this every time I take my corporate CYA training - the courses you have to take every year to ensure you follow security protocols, don't break the law, don't harass people, etc. Since there's a record that I took the classes, the company can blame any problems on me. Blame in an engineering context is rarely if ever productive. But, if you have to blame, you really need to check if the issue was raised to management before you blame. In this case I'm pretty sure the issue was raised, so it's not really on the engineers.