It's tough to say, we'd have to look at the email trail
It's very possible they were just being scape goated. Then again a lot of security measures could have been implemented without extra money if you're talking about salary employees. It's very complicated and we would need to look at the specifics in the case.