This is basically a requirement for certain types of security certifications and for liability CYA reasons in the context of evolving laws about stuff like data

This is basically a requirement for certain types of security certifications and for liability CYA reasons in the context of evolving laws about stuff like data breaches.