The question is no longer "Are we compliant?" but "Are we truly resilient?"
Source: htdarkreading.com