The buck has to stop somewhere. Far too many people blame others to shield themselves when they’re ultimately responsible. Blaming an IT worker for an outsourced business is weak; the fall lies squarely at the outsourcing business and the person responsible for the purchase agreement. Person responsible for purchase agreement incompetent - then you go up the chain. And so on. Unfortunately the most senior is ultimately responsible (hint: usually it comes with better pay, benefits etc) for the direction and decisions made by a company.

This is is the second IT error of BA in a year and a bit. How many of BAs transaction these days are via online methods (80-90%)? And of those sold via the BA website 70-80? That means 50-70% of all BA purchases would be from its website. For BA not to have the absolutely highest level of security when you’re talking multi billion of transactions with unsophisticated users is worrysome. And the major source of revenues. And who is ultimately responsible? Well, AC of course.

If he cant ensure people can buy its product safely he has failed and should go. If they can’t travel because he has failed to ensure back-up for critical IT infrastructure he should go. It is clear he does not understand the consequences of certain parts of his business. That means I would question what else does he not understand?