[NeedMoreTea]

Both, but as a higher priority, c) punish the exec team on whose watch it happened.

Bring back the concept of responsibility. They are paid to be in overall responsibility for anything that happens under their remit.

Time was such a behaviour in the department, or under their leadership would have ended a career. Realising the actions of a lowly engineer or janitor can end their gravy train, they might implement adequate oversight.

[freepor]

Why just end a career? Why not go to jail?

[NeedMoreTea]

Well I did say punish not merely fire. I would expect that to encompass imprisonment and fine, depending on severity. Ending or severely restricting the career and income should be the bonus, lower standard of proof consequence merely for the event happening whilst they're in charge. Separate from a court fine of 5 years salary, all bonuses and share options, or given 3 years in clink. :)

With adequate penalty and frequent enforcement, usual behaviour would change...

[craftinator]

In a system with social capital this would be entirely possible.