There’s some truth to it but a consulting firm like KPMG is like a feudal empire, comprised of many little fiefdoms, all tasked with earning and growing a certain amount. A $25M fine means whichever department responsible has probably been nuked and won’t be doing much of this type of work again. However, you are right that it’s not significant enough to change how the emperor’s court conducts oversight.
I do agree some small group of people within the KPMG empire is going to feel the sting of this. I worry the lesson for the rest is going to be "don't get caught", not "don't do that". I struggle to think of a way to get the right message across that doesn't involve real punishment at the top of the pyramid.
