You may want to check out ALTA's website for information on the seven pillars at this link:

http://www.alta.org/advocacy/news.cfm?newsID=20266

Phil is correct, it is a complicated process and we have to even be careful with the persons we hire to be janitors in our offices and if the public has access to our desks on the way to the settlement room.  The person who authorizes users on a computer network, is not supposed to be a user of the computer network...things like that.  I don't think they expect you to meet every single requirement.  These are just best practices you need to work towards in order to be a certified operation.  If you don't have certifications either from ALTA or some other private vetting organization, there may be no work to do.  And even if you are OK with ALTA, a different lender may require you to be certified by one of their organizations and pay seat licenses for the privilege. Our industry is facing some new changes in the next year and a half, and now is the time to get prepared.