I don't understand what's going on? What kind of devices are we talking about?
IT admins can set a policy like "must have 6 number PIN for login", if it does not then it is out of compliance.
This can mean nothing at all but if the company wants to act on it, it can.