Yes. We would look to see whether they've thought of all the aspects, and their analysis would be where they would do that and identify the risk. In some cases companies who have decided not to do something have done an assessment and decided the mitigation is just too much and it's not a worthwhile piece, so we may not even see it.
On November 25th, 2013. See this statement in context.