Non-profit organizations tend to lack the adverse profit incentives that could weaken standards and drive a race to the bottom.

“non-profits tend to not have these adverse profit incentives where they hollow out their standard and create a race to the bottom but they're also not at all responsive by default to the communities that they serve because there's no process they don't have customers that they serve where they go and ask what do you want what do you want what do you want and when you look at the overall satisfaction with the security standards today”