The trial of the network administrator who refused to give up the passwords to the network ended with a guilty verdict.  What controls were missing in this case that led to the incident in the first place?  Who do you think should be held responsible for an environment where such an incident can occur?

Tell us what you think.