Years of consultants, audits, warning signs not enough to raise a red flag. Really?