[littlestymaar]

You are confusing two things:

- the requirements.

- the compliance process that makes sure the company members at all level follow the requirements.

Yes, in many topics, particularly in IT, there's no good requirements being enforced, because the people suggesting them are mostly grifters. But that's not a problem with compliance proper, it's simply a garbage in garbage out process.