Michael Burgess actually said...
People who make a legitimate coding error, and it is just a error, that is the little low hanging fruit in your system.
Context
Burgess highlights the issue of targeting minor errors instead of significant fraud.
06/07/2012