> What is the intent of admitting this? Incident response always ends on "lessons learned" and it's rarely productive to hide the facts due to political embarr

> What is the intent of admitting this? Incident response always ends on "lessons learned" and it's rarely productive to hide the facts due to political embarrassment. Earliest disclosure also mitigates against much bigger liabilities as a consequence of a leak. > management above should be fired and prosecuted. And be immediately replaced by management with the same level of understanding and responsibility. > Haven’t these fools realized... No. And this is the key point. The biggest thing by FAR in cybersecurity is education. Ordinary people do not have any working model of the threat landscape and basic operational security because they foolishly, blindly trust technology and services providers. We literally need a second digital literacy revolution. One that undoes a lot of the naive and trusting enthusiasm for digitalisation that we inculcated in the 80s and 90s. Unfortunately that goes against the grain of almost every policy that's active out there today.