Even after identification the company still bears responsibility, given individuals act within processes and controls established by the company. If these are n

Even after identification the company still bears responsibility, given individuals act within processes and controls established by the company. If these are not sufficient (and that’s a very small if in the presence of faults) then the company is as culpable as the employee and is definitely the one who is culpable as far as the customer is concerned. The employee responsibility is for the company itself to pursue in a different process to making its customer whole.