Security is all too often treated as a purely compliance-driven exercise. This isn’t advisable in any industry, but it is ...