@accidentalciso and in order to make it acceptable to auditors and customers you’ll need to add three pages of useless fluff.