You’re assuming that those systems were all implemented to the letter of that guide. That’s never the case. Often these type of guidelines are written to addres

You’re assuming that those systems were all implemented to the letter of that guide. That’s never the case. Often these type of guidelines are written to address recurring problems found in an organization.