A colleague's client was a victim of that NTP attack. Do you have recommendations or a process to qualify 3rd party companies to supplement and audit services?