Your company can't possibly require something and not tell you what they are requiring. That's about the poorest policy I've ever heard of. They should at the minimum offer you a choice of several program that they support and have certified as being acceptable for the level of protection they are looking for.