and essentially protects both the organization’s interest and your liabilities as a tester?