My concern is that you audited the upgrades to security and that in almost all of the cases, they were at least three years behind schedule. They're taking almost twice as long to complete as originally planned. Who does the original assessment of the timeline? Is it your contractor? Is it your internal assessment? Do you use Defence Construction Canada in that regard? I find it alarming, if it's a pattern, that every single time it takes twice as long and is at least three years behind.
On February 26th, 2019. See this statement in context.