A security review needs to happen within the next six months, so kickstarting that review could be a good thing ...