https://www.ncsc.gov.uk/information/lett...d-products
#7 - "As well as keeping this guidance under review, we are in discussions with Kaspersky Lab, by far the largest Russian player in the UK, about whether we can develop a framework that we and others can independently verify,"
re #7 - Kind of like what happens with open source and distros ?
