I run Oracle's Security Evaluation Group. Including Common Criteria, FIPS and other security related certs needed to sell software to the gov't.