Compliance laws and regulations $$

Both A and $B$

can be expensive for II security

Neither A nor B

create requirements to which security must respond