Do you have the resources and processes in place to document policies, procedures, and due diligence? How much security is enough? How...