I have worked at several tech companies that deal with data compliance. Most audits are jokes and most of your data is not secure.