As I said, it is not when the incidents are there. It's when the applications or the systems are developed or when there are any changes to be made. The security aspect has to be there, because otherwise we will not be secure.
On November 30th, 2022. See this statement in context.