The jail time would be hard if you were arbitrarily picking officers or trying to prove what each one did or didn’t do, but I’m sure a law could be written laying out a chain of command/criminal responsibility. And instead of increasing a single scapegoats sentence for multiple offences it could be distributed among the c suite / board.