The CEO should set the organisational culture. I would argue that - alongside the fact this isn't the first issue of this kind by the sounds of things - the fact that a serious error like this could be caused by a developer making a typo reflects very badly on the culture of the organisation.