In the aerospace industry, and other safety critical industries, they use the "swiss cheese" model for risk analysis. For an accident to get through all the layers (slices of cheese) meant to stop accidents, you need the holes in all of those layers to line up in just the wrong way. When that happens you need to investigate and fix each layer of cheese, not focus on the single layer of cheese on the top and ignore the rest. You will never build reliable safety critical systems with the mentality that only a single point of responsibility needs to be identified and corrected.
It’s like dieselgate. Or the Pornhub chaos.
The VP’s tell the directors to get it done. The directors get it done.
There’s a liability force field and those that protect and serve are elevated.