The International Organization of Security Commissions is drafting "common standards" for crypto policy. But is it too late for that?
