Which of the following best captures the relationship between compliance and security in an organization's information security strategy?

a$.$ Compliance provides a minimum standard, but does not guarantee security

b$.$ Being compliant reduces the organization's focus on security.

c$.$ Security is only needed if an organization is not compliant.

d$.$ Compliance and security are the same thing.

e$.$ Compliance ensures that an organization is secure$.$