In the course of discussions with a potential outsourcing service provider, a spokesperson reveals that her firm had a major security breach last year. However, she goes on to explain, the company had learned a lot from the incident and, as a result, had implemented many changes. She spends the next 10 minutes summarizing those changes. Later, when you and the rest of your evaluation team are alone, one team member states that allowing a major security breach should disqualify the vendor from further consideration. How do you respond?