Which of the following best captures the relationship between compliance and security in an organization's information security strategy?
a. Compliance provides a minimum standard, but does not guarantee security
b. Being compliant reduces the organization's focus on security.
c. Security is only needed if an organization is not compliant.
d. Compliance and security are the same thing.
e. Compliance ensures that an organization is secure.