Benchmark – Attack Vectors Models

Security professionals need to understand that compliance, along with strong security policies, can make organizational security stronger, but not completely hacker-proof.

In 500-750 words, explain how compliance with governing standards can fail to provide security even when using the Diamond Model of Intrusion Analysis or Cyber Kill Chain model. Where does the use of the model's tools (e.g., relating to HIPAA, DOD, etc.) still make an organization vulnerable even though the organization is compliant with industry regulations and standards?