The speaker believes that combining a high-level disclosure document with an audit could produce substantial useful information about companies’ training practices.

“like what their selection criteria are for like including or not including hackable environments and then you have somebody go in and check that they implemented that well and the sort of combination of that sort of broader document and the audit could generate a lot of helpful information”