> The auditors are typically 10 to 15 years behind technical security expertise. Probably not, but they are there to be paid by their customers. Does the custo

> The auditors are typically 10 to 15 years behind technical security expertise. Probably not, but they are there to be paid by their customers. Does the customer have to mark a checkbox on a regulatory form? Give the customer some answer which is not blatantly false or useless, get the money, come back next year.