[sngz]

I'm implementing it right now actually and it's a combination of automated tools and someone third party actually going through and verifying all the controls.