Would it be possible to release all the controls necessary to comply with CIS's M365 benchmarks?