Regulatory Compliance & the Real Risk of Undetected Malware