Not just CEOs, make employees liable. Going after the soft targets first will reduce the resources and influence of the harder targets at the executive level.