How can I be CPI compliant without using a company or Security Metrics? I would like to do it on my own to save money
