Do not equate security with compliance

It makes a lot of sense to integrate compliance and security efforts. But Baseline warns that it would be a mistake to think that just because you are in compliance with Sarbanes-Oxley and a host of other regulations that your systems are secure. One mini-trend underway: Rethinking the system, and orienting it around security. That is, let security drive the process, and hit regulatory requirements along the way. Currently, many companies have let compliance remain in the driver's seat. Some companies are focusing on relevant ISO security standards, which would de facto cover a lot of regulatory requirements. Article