Security is built on compliance