Absolutely. It is also the job of management to put processes in place to have effective security and to require audits. The fact the CEO accepts no responsibi

Absolutely. It is also the job of management to put processes in place to have effective security and to require audits. The fact the CEO accepts no responsibility and blames a mistake made by IT is worrying and he should not be allowed to hold management positions again.