Which of the following best captures the relationship between compliance and security in an organization's information security strategy?

a$.$

Security is only needed if an organization is not compliant.

b$.$

Being compliant reduces the organization's focus on security.

c$.$

Compliance and security are the same thing.

d$.$

Compliance provides a minimum standard, but does not guarantee security

e$.$

Compliance ensures that an organization is secure$.$