I think more than that is required. I think that they should be held liable even if they do not know. I think it should be their responsibility to to find out and to design corporate structures that don't incentive and conceal illegal activity by their subordinates.
That's fair, although at a certain point (e.g. international holding company with several large subsidiaries) it becomes impossible to police every activity by every department of every subsidiary.
