Is she a good leader, and looked to her senior staff to insure that Equifax was protected. Want to bet she had many different types of security to manage, and it meant security in development, encryption, operations, backups, testing, staff monitoring, premises and more. Her role is management, not hands on. She also has to manage budgets.
It's very easy to criticize. One thing you can bet on is that Equifax had security audits, scheduled and random, and the company adhered to the strictest norms.