Call me a dinosaur (that's OK, since its the weekend and dressed down to work in the garden) but ...
Surely COMPLIANCE is a binary measure, not a "level of" issue.
You are either in compliance or you are not.
As in you are either deal or alive.
[ viagra uk | viagra pill | how to get viagra | viagra retail discount ]
I am currently available to offer InfoSec & GRC audit and consulting services through my company - System Integrity