https://rainmakerless.org/cloud-security-compliance-verification-protocol/