You're Compliant, But Are You Secure?