[lern_too_spel]

Presumably, he's referring to SSAE-16 auditing, like for Google's products. The problem of auditing suppliers of parts and services is decades old and effectively already solved.