the point of good security architecture is exactly that such thing can't happen. Security by compliance isn't good security.