I understand that concern. That's why, I guess.... Certainly, an improvement would be to at least have an independent audit, an independent yearly certification, so that now there's a proper policy in place that meets the standard and it is complying. It is something that I understand is largely used in the private industry, and that would, in a sense, address some of the concerns I hear you raising.
On June 4th, 2018. See this statement in context.