The biggest vulnerability companies have to compliance is their userbase
According to Clearswift, 45% of employees have accidentally shared key information in emails to unintended recipients. If this a concern to you, there is likely a need to upgrade your email scanning appliance/software: