Isn't it ultimately leadership's responsibility to prevent these situations from occurring in the first place? Shouldn't they have been testing/auditing this system beforehand, addressing risks, and ensuring there were adequate operational plans ready in the event of an issue?
It's easy to blame software (even easier when that software clearly doesn't work), but blame ultimately should be on the people making the decisions along the way that led to this outcome.