Only 7% of companies achieve full compliance