@kevinkenan Sorry let me answer more succinctly. I'd be very surprised if a control scoring less than three was primary cause of breach.