I'm just giving my perspective as someone who's gone through it recently. It was a lot more about setting up policies and practices than it was practical digit

I'm just giving my perspective as someone who's gone through it recently. It was a lot more about setting up policies and practices than it was practical digital security. More about documents describing security plans than about specific implementations and checking that they work and are effective.