The situation surrounding the Horizon IT scandal raises important questions about the role of oversight in corporate practices. How can we create a framework that holds corporations accountable without punishing those who were not directly responsible for the failures?