No one's really sure how many assessors it will take to certify the entirety of the defense industrial base's cybersecurity.