Execs should absolutely be held responsible, but the human factor is always there. Many times people will take the easy route and get worn down by security prac

Execs should absolutely be held responsible, but the human factor is always there. Many times people will take the easy route and get worn down by security practices or roadblocks. I think it's too easy to go "alright focus on security" and then expect it trickle down and figure itself out.