If you pass compliance, you must be to some degree complying with the requirements.
I agree passing compliance means that you are at least providing the security that is required. It's funny how you can have a little non-compliance to get the funding to increase or upgrade your security.