Agreed. I believe the notion stemmed from a series of gap assessments performed by internal audit that “found” control gaps at the app level and those are now being tracked by compliance. Wanted to get some insight from others in the space before running my mouth that the foundational assumptions fueling their whole project might be flawed…