I should add that in a large company like this, the CSO flies at 50,000 feet. She is unlikely to be aware of the sloppy practices that go on at ground level, and frequently it is very difficult to get subordinates to admit that their departments have a lot of problems.
In a dotted line situation, every manager concentrates on pleasing his primary manager, who wants the work done as rapidly and cheaply as possible, and pays only lip service to corporate-wide programs like security.
She should of had “secret” staff dedicated to breaching security unknown to the actual IT department staff.
What’s your deal ?
She was a diversity hire (only one out of three points) and you’re good with that, right?
Nonsense!