Security managers had to beg, borrow and steal the resources they needed to secure their systems. As regulatory mandates and the need for compliance grew, security professionals had new leverage to use in their fight for budget. It’s easy to get your security program sucked into the compliance is the only thing you have to do mentality, analyst says. Survey: 39 percent of IT security spending justified by legal and regulatory demands. A surprising one in ten respondents said spending on security receives no justification at all at all.”]
Source: https://www.csoonline.com/article/2132481/the-race-toward-compliance-is–not-optimal-.html