Compliance without the checklist by persons who lack a basic Information Assurance experience, though, is a simple recipe for trouble.