Fining corporates bodies is pointless (unless the fines have 10 digits), particularly publicly-owned bodies. Make the directors personally liable. A few cases of bailiffs towing away Bentleys and confiscating the title deeds to the agreeable villa in Tuscany might persuade some of them to start taking security seriously.