Why security compliance is important