Reply to post:

Enact a law to make board of directors liable for any major incident unless they can prove they took every step to prevent it. I.e. reverse the burden of proof.

Then watch the IT budgets transform!