[marcinzm]

Yeah. There's a very big difference between pen testing and coming up with SOC compliant processes.