Security and Compliance go hand in hand to complement each other. Yet there is a very thin line which separates them from each other. While Security offers protection to vital resources, Compliance is a guideline to how to meet industry specific security standards by regulatory bodies like PCI, ISO27001, HIPPA, FISMA, NERC, FERC and many more.
A security plan which does more than the required compliance requirements is the one which is promising in the long run. Since compliances are legal requirements and security is not; Enterprises tend to overlook Compliance requirements, forgetting that violations lead to legal actions, fines and bad publicity. It is then in the interest of the Enterprises to comply, meet federal regulations and standards for privacy and protection.