You’re right, which I also used in my argument, but I was shot down by our own people, because their success metrics were based on passing the audit with the le

You’re right, which I also used in my argument, but I was shot down by our own people, because their success metrics were based on passing the audit with the least amount of fuss. We kept our other controls, we just added edr as well, because just having it appeased auditors. If you try to explain to an auditor your other controls, it could change a part of the audit from five minutes to multiple days. We don’t use crowdstrike, but this was years ago.