[1] https://techbeacon.com/security/why-equifax-breach-should-ne...
There also hasn't been aggressive legislation about it until CCPA. Start adding minimum costs for a breach and things may change.
It's the executives job to keep software up-to-date? Not the engineers building the software or implementing open-source tools? I understand being buck-stops-here accountable for the hack, but how could they be charged for negligence? Was there a conscious decision by the execs to not update the software?
It's be hilarious/sad if the executives got punished for something like not updating software, because you know what the result would be? Companies would set up a system to protect execs and ensure the line-workers would be held accountable for hacks or breaches. That'd make our jobs super fun.
Ultimately, yes. They are in charge, they are accountable.
> because you know what the result would be? Companies would set up a system to protect execs and ensure the line-workers would be held accountable for hacks or breaches.
As if most big companies didn't already have these systems in place.