It may not appear obvious, but if you look to blame someone when there is a cyber security incident, then it is almost guaranteed that those incidents will always worse than they needed to be. Why? Read about it here:
Clive Catton MSc (Cyber Security) – by-line and other articles