What can you outline for us?

Yeah, that was a post-PhD trial, so I took, um, about a hundred and ninety-three, nearly two hundred inspections.

Uh, particularly, we targeted the framing, uh, side of things because there's a thirty-two percent first-time failure rate there.

So that's something there that I thought, "Well, we can fix this.

Let's test it." So we went out and we, and we put a process in place where we used quality gates to ensure before inspections, we used quality gates to ensure that work was complete and evidence was provided so as that we knew if it was remote inspections, then council can look at this and say, "Well, yeah, sure," or, or remote certifiers can look at this and say, "Well, yeah, actually that does pass.

It is to code." Uh, it's a verifiable and traceable process, and that's what's needed.

Um, it's also a hybrid approach.

Do you have worries about the increasing ability, then, for self-certification?

So explain that again.

Sci-hi.

We call it sci-hi, but it's actually vulnerability scanning.

We're not going inside your network to scan.

We're looking at all your public-facing IP.

So we're basically looking at the front of your house or the front of your hospital and telling you, You know, once a week or maybe or maybe more often, depending.

Hey, you got you left the window open.

Yep.

So why don't you walk us through what CISA does, the total scope of your responsibilities, so our listeners have a better understanding, and I would argue, a better appreciation of what you guys do.

Okay, sure.

So, I mean, CISA's process is huge.

I mean, I didn't even know it, and I've worked for the government for all these years.

But, you know, we were established.

We're still what they consider one of the fairly new organizations in their homeland security.

So it's under the Department of Homeland Security.

You know, some simple biometric, and I don't have to remember it.