[nikanj]

And it's not enough to explain it to management, you also need to explain it to your ISO auditors, your customers et cetera ad nauseam.