Most of us work in tech. Imagine an auditor coming in and trying to sort out if one of the most complex systems at your company is "safe." What's safe? Every previously known failure mode and every new one you're going to be blamed for when it happens.