I would wager a foolish sum that Colonial had a complete shit security posture and had many opportunities to improve but chose to accept this risk at the executive level. I have zero sympathy for Colonial.
“Tech audit of Colonial Pipeline found ‘glaring’ problems”
https://apnews.com/article/va-state-wire-technology-business...