I think the company should also take note and make some updates to in their technicians what mean i that ensuring a better thoroughly vetted and trustworthy technicians to prevent thief or mismanagement of sensitive financial information and accessing funds during the recovery process, puls the company's should also take note on regular monitoring technicians activities and transactions on a daily basis puls having to restrict them to access sensitive information and funds, and i think the companies should be held responsible or accountable for any misconduct or negligence by their technicians, also having them undergo some background checks on them before hiring them, make provision with good expertise technicians in some enrollment of training them to no security measures and ethical standards.
All what you have said is not bad, as a global organisation, it is expected that they do a background check on their staff because the nature of their engagement is a sensitive and a very tempting one that if one has no self control, they might act funny and it would affect the reputation of the organisation so the organisation would be very vigilant and alert on their staff. Things of this nature is coordinated by Human Resources Dept. as they do such check on their workers to make sure none is found wanting in their previous place of work or possibly has any record that would warrant any funny behaviour from them.
However, I believe they do sign up for code of conduct if they do have such which would hold any staff accountable for any misconduct or if they breach any agreement for which they have signed for. These are the things organisation do as modalities for employment so that nobody misbehave while with them.