You are 100% correct, but logic to an examiner??? They only know what is written. That's their job. You can help yourself by pointing this out "in writing" in your risk assessment. This way, you are stating that you are aware of the risks, but are accepting it based on your ability to cancel everything. Just make sure your vendor relationships can cancel everything and the report does not sit on the COO's desk while he/she is on vacation.