 of security experts who would recommend to courts in individual cases whether this kind of penalty should be applied or other penalty models that could be used that would actually impact these executives and not be so easily finessed away by them. But the bottom line is that rather than concentrating only on the parties carrying out these attacks, serious consideration should be given to applying significant penalties to the persons running these large firms in cases where reasonably foreseeable situations permit these breaches