Many cases you set up something like Alienvault or Cygilant and then it never gets looked at again...huge waste of time and $ in the name of compliance