[Kar Wee PeeParticipant]

I think this is an area where cyber security companies are actually stepping in and providing reports that can aid in such evaluation.