Which of the following best captures the relationship between compliance and security in an organization's information security strategy?

a$.$

Compliance and security are the same thing.

b$.$

Compliance provides a minimum standard, but does not guarantee security

c$.$

Compliance ensures that an organization is secure$.$

d$.$

Security is only needed if an organization is not compliant.

e$.$

Being compliant reduces the organization's focus on security.