Your comments

Also bumping this - as it will be required for Australian SOC and ISO compliance.

I agree with Jasper, the option 3 arguably the most important out of them all didn't get included. Whats the go guys?