Compliance itself is not bad, but complying with security standards set by government, such as HIPAA, or industries, such as PCI, are not enough to keep networks secure, Corman says.

• 规范本身不是坏事，但是遵守由政府设定的安全标准如HIPAA或者由行业设定的标准如PCI，是不足以保持网络的安全的。