I’m in Defense  rather than banking  but it’s much the same The text of the regulations matters less than the auditors’ interpretations of how things ought to be  and while it’s a fight you could theoretically win  well  is it really worth it? As a practical matter  it’s almost always better to not be asked a question than it is to have a really good answer to the question