Nordholm Systems’ release checklist leans hard on “ensure ho…

Nоrdhоlm Systems' releаse checklist leаns hаrd оn "ensure host and network security basics are in place" — it's the item every team completes almost without fail. Yet when engineers are asked how much that item actually contributes to the software's own security, not one of them rates it as high or very-high impact. Meanwhile, external and internal security audits — used far less consistently — are the release-phase activities rated most impactful. Which of the following are plausible explanations for the host/network finding? (Select all that apply.)