Which of the following best captures the relationship between compliance and security in an organization's information security strategy?

a$.$ Being compliant reduces the organization's focus on security.

b$.$ Compliance and security are the same thing.

c$.$ Compliance provides a minimum standard, but does not guarantee security

d$.$ Compliance ensures that an organization is secure$.$

e$.$ Security is only needed if an organization is not compliant.