For many companies it's just a checkbox towards compliance of some sort. You can argue and be right until you're blue in the face, but in the end it's the appro

For many companies it's just a checkbox towards compliance of some sort. You can argue and be right until you're blue in the face, but in the end it's the approval of, and certification by external auditors that matter.