Once the requirements have been ratified, firms can ensure that what they build and provide to partners has been validated prior to resources being expended.
This was due to the initial process that was required to validate one's identity, unregulated security requirements by the commercial companies which issued them.
