Tim Scott actually said...

This is correct. One of the techniques we have used to estimate the level of legacy systems is I recently went to some of our key suppliers ...

It concerns me that we have done so little to engage in a process of stopping that behavior.

That is the greater risk. I am quite concerned about it, in total.

it is our recommendation at this point that this is the best we can think of, in terms of how to go forward.