Something that I found interesting moving into the financial sector is that some individuals at the bank can be held personally liable for bad decisions. For example, top compliance officers at a bank can be held liable if it later turns out terrorists (or the like) were able to bypass bank controls. This is supposed to engender good risk management around compliance risk.

If we can do it for compliance officers, why not for CEOs? The average citizen is more likely to be harmed by financial collapse than a terrorist.