Hacker News Reader

> Throwing the CISO in prison because the CEO/CFO won't fund infused isn't going to change anything.

It might? In civil engineering it kind of works like this, doesn't it?

I don't believe professional engineers are held liable for a legacy bridge that they can't get funding to repair, or a project that was built in violation of their specifications by a corrupt contractor. They're only held liable when the engineering work is flawed.

It doesn't actually. It just means construction becomes extremely slow and backwards because engineering subcontracting firms now send unlimited amounts of construction delay notices to cover their asses when things are wrong and then ultimately still building the wrong and outdated things and leaving it up to the auditors later to fail the audit review to allow people into the building.

So if your goal is to not have people die, you accomplished your mission, but if your goal was to make the project owner be responsible not to fuck up you still failed.

Reply on news.ycombinator.com