The Real Cost of Software Non-Compliance (and what to do about it)