I completely agree with you in this particulars above.
But if a company like Eqifax doesn’t have a CSO (Chief Security Officer) who reports directly to the CEO, then they’re running the business wrong.
But in the above quote, I disagree with you. It happened on his watch. At the very lowest level of culpability, he failed to create a climate of accountability in his subordinates, and he failed so shockingly (again, presuming the lowest possible level of culpability) that his actions amounted to negligence.
This isn’t just my opinion.
