@calamari @kushal Not sure this take is as sensible as it might appear. Regulations exist for a reason. Regulators are not responsible for an organisation's flawed attempt to satisfy the regulation. A business is responsible for managing its own risks and meeting regulatory requirements. No one has forced these businesses to operate with disregard for their own business risks.