[0xa2]

Do what is right, regardless of incentives, culture, etc. I couldn't agree more. But the mishandling of the breach is indicative of failures at multiple layers, not just security. And I am not sure how his indictment fixes much.

[kjs3]

That's a good point. There's an old Italian saying: "A fish rots from the head". It seems clear that executive management said "find a way to cover this up", and the CISO made every effort to do so.