“See, this vulnerability is covered by an organizational measure.”