I cannot speak for everyone, but in my neck of the woods there are specific deliverables like locking down server access more, removing poorly secured test acco

I cannot speak for everyone, but in my neck of the woods there are specific deliverables like locking down server access more, removing poorly secured test accounts and older auth methods in general, locking down network in terms of what can access what, cleaning up dependencies, etc. There's a list of about 20-30 things that are to be measured automatically and driven to ~0.