You are correct. As the main owner of that relationship, it was the responsibility of Optim360 to perform a thorough vendor risk assessment of ACMA security and data handling controls, and the sad reality is they probably just decided to work with them without fully understanding that risk be...