The newly approved Consensus Audit Guidelines are a nice first step, but fall far short of the mark, according to one emerging government security watchdog.