I can see a new question for the various GRC frameworks:

"Do you operate or rely upon any legacy 8-bit CAs?"