"Symantec have asserted that their oversight of these RA partners was primarily based on reviewing audits," Markham wrote about Symantec's response. "However, the audits had a number of irregularities of various kinds, including being of the wrong type and so not covering the BRs [baseline requirements] at all, or not covering all issuance, which were not noted until recently. This claim of oversight therefore rings fairly hollow."