The minimum bar is a theoretical idea. The reality is yet more audits and auditors and internal regulatory staff to produce more documentation that "proves" compliance. It's a huge weight, not lightly welcomed.