CEO Lutz Schüler and his team tried to shift the blame to a single employee, but the real blame for a breach that impacts 900,000 customers lies in the failure to unify the management of risk.