Security vs. Compliance: Are We Asking the Wrong Question?

Dejan Kosutic discusses whether security or compliance is more important and argues that this is the wrong question. He explains how compliance can support security through three “Bs”: acting as a booster by unlocking budgets when regulations or client requirements make security obligatory; providing a baseline via standards like ISO 27001 and technical security standards; and enabling a business case when ROI is hard to measure by showing avoided penalties, reduced liability, and potential revenue gains. He concludes that security is the ultimate goal while compliance is an enabler.

LINK FROM THE VIDEO
► Report: Compliance and information security - How are they related? https://advisera.co/InfoSecCompliance

• (00:00) - Security vs. Compliance Are We Asking the Wrong Question?
• (00:12) - Different People See Security Differently
• (01:07) - How Compliance Helps Security
• (02:35) - Compliance as Enabler, Security as a Goal