Very quickly, Mr. Chair, I could simply add that throughout the process, and even ongoing, internal audit provides us with periodic briefings on its management of this file. So we are aware. We have had a briefing on the department's action plan for responding to the weaknesses that became apparent as a result of this unfortunate incident. We're comfortable at this point to let the department and internal audit carry on. If they implement that action plan, the controls should be strengthened.
Controls can never ultimately stop these things, though. That's the one caveat. They're not a panacea. If people don't exercise the controls, if you have management overrides, all the controls in the world won't stop them.