Import standards from github.com/opencontrol/standards

[jmccarthy]

Rather than including during init, consider introducing comply standard add to emit the file at runtime into the standards directory

[indykish]

How close enough are we to https://www.fdic.gov/about/strategic/ispsp/fdic-information-security-and-privacy-strategic-plan-2018-2021.pdf in terms of compliance(risk management)?