Agreed - I don't like the way we've shifted responsibility to the hapless employee away from whoever wrote, purchased and approved the vulnerable piece of softw

Agreed - I don't like the way we've shifted responsibility to the hapless employee away from whoever wrote, purchased and approved the vulnerable piece of software that actually was exploited here.