The Shipment That Arrived Infested
A client's supplier sent product that arrived infested. Not damaged — infested. The supplier had passed every document check. Nobody had actually stood inside the facility.
That's the part that gets skipped when vetting happens from a laptop. A certification doesn't tell you what a walkthrough does.