This really gets at the issue. These are compliance tools mandated by auditors and accountants that are intended to provide centralized config/control of everyt

This really gets at the issue. These are compliance tools mandated by auditors and accountants that are intended to provide centralized config/control of everything. Ultimately, they make companies insecure as they have tentacles into everything important. They are used against the companies (by hackers). That should not surprise anyone. You can be compliant and buy insurance or you can be secure. Pick one.