Comment by notesinthefield

You always take the written policy win over thoughtful technical controls. Way easier for the whole org.