Security is practiced for its own sake, not to satisfy a third party’s needs whereas Compliance is practiced to satisfy external requirements. Read the blog.