“It's not that critical, this vulnerable app is on our internal network only.”