I agree that there are solutions available at a reasonable cost, but the question is why this organization appararently did not implement any of these solutions

I agree that there are solutions available at a reasonable cost, but the question is why this organization appararently did not implement any of these solutions, and will they do it after this incident.