We have set the standards, which is what is required. Then we have tested organisations as to whether they are meeting those standards. Where we find they are not, we work with them to make sure they understand what is required and they do what is required of them.
