It's a very important part of it, but it's certainly not the entirety. I think it's important to note that the Auditor General did not audit departmental security practices. They didn't audit the specific actions being taken to ensure that security in all those important areas that I mentioned are being done.
The degree to which those departmental plans had been signed off by their deputy heads was audited.
A great deal of important practices are ongoing every day to ensure that the security of departments in all those important areas is under way.