Re: I can suggest a guaranteed fix:
For any company that suffers a data breach, the CEO must serve a ten year jail sentence.
And where the breach comes about because of the myriad vulnerabilities even in the best software? Where the breach comes because MS changes their policies on EMET (Extremely Massively Excessive "Telemetry") and starts slurping data from all those enterprises who foolishly trusted them? Where an employee who passed all the best testing available turns rogue and steals data?
Even the best protected with the best practices in place can be vulnerable to the unexpected. You can do your best to prevent, but then even the best driver in the world would fall victim to a sink-hole opening up in the road a heavier truck just drove across.
All for people further up the food chain facing serious penalties for anything that could be their responsibility, but that is over-ridden by a very severe hatred of innocent people doing time, even a little bit. Those who advocate such things perhaps should give it a few months trial first?