I'm not sure if I can off the cuff, because I'm not aware of the specific data that was referenced. What I could probably do is to conceptualize the issue of the focus being simply on releases and measuring those. Releases are an important part of the equation, as we've talked about today, but those releases should be put into the context of whether or not we can identify a need to manage those releases. From our perspective, if you have a science and risk-based determination as to what controls make sense, where do you put your dollars to be able to control those releases? The difference is that the onus is on trying to understand the actual impact, the real-life impact of those controls, and whether or not there is a necessary requirement to in fact manage a risk associated with those releases.
On May 19th, 2016. See this statement in context.