Rajiv Shah and Jay Kesan wrote the paper “running code as part of an open standards policy” arguing that the “running code” requirement – i.e. multiple independent, interoperable implementations of an open standard – should be part of governments’ open standards policies.

You are only as safe as your expert opinion . But then the question is, what if the expert opinion is followed, and you are certified and you still get a data breach that costs the company millions of dollars.