
I bet it's even less in reality...
... I have clients who just run down the questionnaire portion of TrustWave's audit, ticking yes on everything. I bet the true compliance number is even less; I wouldn't be shocked if it were single digit. (And yes, I've told them to actually read it and do what's needed...)