For compliance reporting Define a zone of trust and anything other than the zone will be flagged as findings
