It stays in the room.
For material that can't leave the room, and answers someone has to sign. Grouped by how the system connects, from sites where every connection is controlled to firms bound by a duty of confidence.
Behind a perimeter someone audits
Inside an examined institution
Don't see your industry?
Bring two things: the material you would approve, and the person who would check the answers. That is where a consultation starts.