Are lessons being learnt at the top. Or does it take a public breach to focus the corporate mind?