This isn't for "closing a deal" but because the audit co is signing off on financials. This is why in a companies public reporting, they have a section about po

This isn't for "closing a deal" but because the audit co is signing off on financials. This is why in a companies public reporting, they have a section about possible damage from losing customer info. That's legalize for: 1. The Public Company being audited isn't going to spend money on a real technical audit and may in the future lose customer info, etc. 2. The financial auditing company doesn't have enough experience to properly asses the situation. They did the best they could but they're no experts.