I'm surprised no one (including the IEEE and NPSE, linked in another comment) has mentioned that software engineers should be responsible for disclosing knowled

I'm surprised no one (including the IEEE and NPSE, linked in another comment) has mentioned that software engineers should be responsible for disclosing knowledge of any data breaches (and probably security vulnerabilities) that they know about. This would be at the top of my list.