I was talking to a long-time colleague the other day about his firm's recent brush with a compliance audit. He’s the type of owner who prides himself on having his ducks in a row, but he sounded rattled. He’d just received a formal notice regarding how his team was handling customer data, and his first instinct was confusion. He thought that because he had an antivirus and a firewall, he was covered.