Crass incompetence at securing IT systems is not a criminal offense, no one is going to go to jail for that. But insider dealing is a criminal offense with a potentially heavy jail penalty.