"Chilton, however, said Childs' supervisors at the Department of Technology were also to blame. He said they "did everything wrong that they possibly could," citing "ineffective management and no formalized policies and procedures" for dealing with employees in such situations."
As one who manages a fairly large team of Network Engineers, I find it hard to believe how painfully absent the city's management must have been to let things go as far as they did. Clearly the city wasn't using two-factor authentication, vaulted enable passwords, or nightly backed up configs (Rancid or role your own) - all of which are pretty bog standard network-manager checklists.
