Under Australian law, directors can already face personal penalties or removal if a company is compromised because of weak cybersecurity, a backdrop that helps explain why more than half of the Elastic respondents expect executive accountability to follow a serious breach. Yet 28% of respondents said stronger accountability had mainly produced more paperwork rather than operational change, and 11% said nothing had changed at all, per Elastic’s findings.
