So, Carl, as the cybersecurity guy, as the expert, because I'm not, I might know the DOL stuff, I might be really good at the Arisa stuff, but I am not a cybersecurity expert, nor do I pretend to be, which is why I love to bring in experts like you So you as a cybersecurity guy, for example, do you really think that a small third-party administrator, claims-paying entity, or a CPA perhaps, or an agent or broker, do you really think that they are savvy enough in cybersecurity to do the things that are required under the DOL cybersecurity rules and guidance?

So, you know...

We can't be experts at everything, right, Dorothy? So what I would suggest is pull in somebody like myself or somebody else with a similar background to help you, right? Because even like most companies will have their IT guy, right? But IT, there is an SOD, a segregation of duties concern because IT, their focus is typically to keep things open and easy to use because they'll get fewer questions, right? From the business, right? If it's working, people leave me alone, right? And if it's not working, don't fix it.

Exactly.

You start security.

Well, now I'm going to add things like MFA encryption or I'm going to do all these controlling laptop, monitoring websites, controlling.

So anyways, it's you start to add control.

But what would you look for if you were evaluating the cybersecurity strength or weaknesses of a company, Carl?