Agreed. My experience with regulators, CFTC and SEC, was they were pretty no-bullshit about auditing and compliance. We jumped through a lot of technical hoops to make them happy.

My colleagues would get called away for hours, days explaining how our systems worked, how we verified it. etc. I recall some had to go testify in court about them!