What is Compliant is Not Secure For the simple reason that what is Marked as Compliant as of today actually represents the Past activities and does not necessarily mean that the same set of practices are performed as of today.