I see you’re quite the nihilist when it comes to computer security. But for your information, there are a lot of people in the corporate and government world that think computer security works like a bank. Unfortunately for us, many of those people are running the show, and too wealthy to care about learning about the details; that’s our job. So ultimately this so that they can feel save at night knowing they’ve covered their ass from negligence. This is why things like NIST-171-800 exist and this tool would be helpful for mandatory practices required to do business