OH: The issue here is not attack probability but rather passing the compliance audit. #InfoSec