How enterprises can ensure strong security compliance programmes