> A non-zero amount of that legacy is due to regulations and compliance. Although there's a kernel of truth there, it's far from accurate. Most of the legacy i

> A non-zero amount of that legacy is due to regulations and compliance. Although there's a kernel of truth there, it's far from accurate. Most of the legacy is due to the assumption of regulations and compliance. The truth is that most of the systems are in fact out of compliance, but as long as you don't touch them the likelihood of a serious audit is small. The complexity is more about erecting an impenetrable wall to make the auditor assume it's probably compliant. It's essentially about overwhelming auditors with details to fatigue them. Not to dissimilar to when lawyers flood each other with documents in tv shows.