> the head of risk management told them to get lost

That's why it's important to org-chart engineer for security, if a company is really serious.