The design of the system today.... Again, given the fact that different organizations operate in very different security environments and in very different threat environments against different organizations, giving the deputy head the final say is currently the policy in place.
To change that—to say to a deputy head, for example, that they are not empowered to make that decision—would be like saying that they're required to accept somebody else's positive or negative decision about somebody they're hiring. That would undercut their own responsibility as accounting officers to manage the department.