Comment Re:question (Score 1) 21
The position that scares me is head of computer security (whichever acronym it goes under)
There are exceptions. Previous company got hacked - once - and created a decent security department, with a knowledgeable CISO. That said, there have already been a few instances where he was overruled by the CEO and/or CFO, leading to the blatantly obvious security holes that he warned about.
Company continues to use 3rd party firms to develop software
I'd say management doesn't learn from being hacked, but that isn't true - they only learn if it affects their bottom line, and there have been several studies recently showing the stock market generally doesn't care anymore.