You can't hold firewalls and intrusion detection systems accountable. You can only hold people accountable.