That was one of the substantive issues in the investigation. They took the position that they were. Ultimately, we found that the practices were not sufficient. We discussed this in our special report, talking about some of the advice that had started to be made and some of the concerns that were raised.
Certainly, we didn't see situations of bad faith or anything like that, but there is disagreement about the level of risk, the importance and the measures that need to be put in place here. In our report we made recommendations to elevate those security processes.