“Light touch” was not as rigorous as an initial application should have been. The concern here is that many of the extensions came through the student direct stream, which was a “light touch” stream. When you look at the data of who was applying through that stream, a significant portion came from one country that had been identified as high risk.
We saw a disconnect between the risk rating of a country and the light touch applied in the initial application, and then doubling down on a light touch in the subsequent application. We flagged concerns there. It's important to know that the direct stream is now cancelled, but now you need to not just do a light touch on every single extension. You have to go back and decide if they were high risk and not treated with enough rigour at the front end.