Security vs. Compliance: Are We Asking the Wrong Question?

Dejan Kosutic discusses whether security or compliance is more important and argues that this is the wrong question. He explains how compliance can support security through three “Bs”: acting as a booster by unlocking budgets when regulations or client requirements make security obligatory; providing a baseline via standards like ISO 27001 and technical security standards; and enabling a business case when ROI is hard to measure by showing avoided penalties, reduced liability, and potential revenue gains. He concludes that security is the ultimate goal while compliance is an enabler.

LINK FROM THE VIDEO
► Report: Compliance and information security - How are they related? https://advisera.co/InfoSecCompliance

• (00:00) - Security vs. Compliance Are We Asking the Wrong Question?
• (00:12) - Different People See Security Differently
• (01:07) - How Compliance Helps Security
• (02:35) - Compliance as Enabler, Security as a Goal

Creators and Guests

DK

Host

Dejan Kosutic

CEO at Advisera & Cybersecurity and AI governance expert

What is Cyber & AI Perspectives — Insights on Cybersecurity and AI Governance?

Cyber & AI Perspectives is a podcast for cybersecurity and AI governance professionals, covering the most important trends, risks, and strategic developments shaping organizations today.

Hosted by Dejan Kosutic, one of the leading experts in cybersecurity and AI governance, each episode delivers deep insights and independent analysis you are unlikely to hear elsewhere — helping you understand what matters now and what is coming next.

To provide feedback or suggest topics for future episodes, contact us at: [e-mail]