I have seen this in the forum that they do final review/check before sending Oath. If they find anything during the check and it needs to be sorted out, they put the file on hold until that is cleared.
Does CSIS=Y have a date on it?
If something popped up on security, they might have asked for...