Risk-based approach to survive the audit or a cleverly crafted by-product of your analytics/AI strategy execution?