Cyber Defenders Are Often Not Fired, When Others Would Be

No. This is a terrible idea. In 2015 CISCO conducted an survey to gauge the cost of incident response. They concluded that it would cost a company roughly $1.2B to respond to all of incidents that Cyber Defenders prevent.

Now let's talk about Target since this is the authors defining example. The heads of Target weren't fired because of the Credit card loss. They were fired for a few reasons:
They stored CC numbers on the point of sale machines unencrypted
They used the same password across every store
They had the HVAC system on the same subnet as the POS
They allowed FTP from POS devices.

That's why the CTO was fired. His defense policy was not acceptable in any organization, let alone a world wide realtor like Target.

if they fired "cyber defenders" every time something got hacked we would have none. would you fire soldiers that got ambushed on a patrol? sh!t happens, you learn from your mistakes, and you build policy and new measures off that.