Which of the following best captures the relationship between compliance and security in an organization's information security strategy?

a$.$

Compliance and security are the same thing.

b$.$

Being compliant reduces the organization's focus on security.

c$.$

Compliance provides a minimum standard, but does not guarantee security

d$.$

Compliance ensures that an organization is secure$.$

e$.$

Security is only needed if an organization is not compliant.