I don’t think it is a question on whether organisations are open or not, but it is an inevitable process. I think it is necessary, as you see the regulators implementing it (compliance) at the applicant stage, where they ask you to go in and explain to them what your compliance processes are, for example, Technological Gap Analysis or they will ask how you are conducting certain kind of internal audit function. Risk management is always forefront and centre for an organisation If you cannot identify your risks, you have a big problem. Audit is a requirement for every financial institution where it is an expected from regulators across jurisdiction.