Which testing strategy should you recommend?
Which cryptography provider should you use?
What should you do?