That is true. But in that level of paranoia I would argue they should stop using software :). In healthcare and other regulated environments they can shut you d

That is true. But in that level of paranoia I would argue they should stop using software :). In healthcare and other regulated environments they can shut you down for months or years because of your handling of audit findings. But you get findings because an employee missed his badge, hold open a door for an auditor or has the wrong training records. But there are finding severities, risk analysis and capa handlings to deal with them. Handling this case is easy. My argument is, when you are in healthcare and you cannot deal with audits and their outcome, stop being there.