https://orbitbrain.com/blog/us-government-wants-security-guarantees-from-software-vendors/