Places that have cobol are the same places that have a bunch or laws being your list of requirement and nobody stopped writing laws in those 20 years. Those are also the places where risk is supposed to be in a different department.