What I mean is, I think external forces that act on the software (non-employee users, standards you need to interop with) leak out and infect the organisation.