Can you still be compliant without actually complying with every compliance objective?