"You know what your problem is?" Erik says, pointing a finger at John. "You never see the end-to-end business process, so I guarantee you that many of the controls you want to put in aren't even necessary."