I propose that from now on, all costs for Identity Theft remediation strategy, along with Identity Theft monitoring, should come directly out of the CFO, CEO, and CIO salary, with no other funding sources. Additionally, all CFO, CEO, and CIO PII should be prominently provided with every breach notification.