I think anyone who has had to comply with those compliance lists knows how useless they are. Easy to make the minimum change that makes you compliant without be

I think anyone who has had to comply with those compliance lists knows how useless they are. Easy to make the minimum change that makes you compliant without being any more secure.