The EU company I work for is pretty security conscious and already implements this almost completely (the exception being a few industry specific niche apps). What do you think would be missing?