Compliance means that a company meets a minimum set of controls. Security encompasses a broad range of best practices and software that help address risks associated with the company’s operations.