That depends on the position, I believe it is easy for a software engineer in a big corp. For senior management or an engineer in a small corp with lots of domain knowledge: a lot harder.

The second set of people can try but when shit hits the fan they will have to explain what happened and why it couldn’t be prevented.