Oh dear. Oh dear.
If your security system planning and auditing hadn't shown that up, you have problems.
If you think the mitigation you've carried out for that risk is the correct one, you have even bigger problems.
Which conviction would Sir prefer ? Data Protection violation or Corporate Manslaughter ??