obviously Equifax has shit security they had multiple webpage panels exposed on the public internet (ouch so stupid) and with default credentials of admin/admin and you are arguing that the CISO is competent? She was obviously massively incompetent.