Viewpoint: When it comes to enterprise security, is it better to focus on compliance or risk?
Many companies focus their security efforts on meeting compliance requirements. But if you are audit compliant, have you in fact addressed all of your risks, or are you just kidding yourself?
Story added 22. April 2013, content source with full text you can find at link above.