@Michel Many BigCo's have 1+ people responsible for security, that act as a gatekeeper (i.e. their approval is required for Airbyte's adoption). They usually have a standard checklist of requirements and reasons why each checklist item exists.
If interested in planning for BigCo adoption (you might not be at this time!), it might be worth reaching out to a few to discuss their checklists and see what compliance may look like (I don't have anyone I can volunteer to you, sorry!)