Horace is the CIO of Abracadabra Inc. and is worried that his team is spending too much time on small, tactical, short-term technology projects for different business units. The CFO, Tobin, asked Horace to review data security and compliance risks related to these projects. Horace discovered that many projects were done by an independent contractor named Keith, who used Excel macros and Access databases but provided no documentation. With Keith unavailable, there is no support for fixes or changes, posing security and compliance issues.