By simplifying compliance management, security and risk teams can focus on managing operational risk, not compliance risk — and better counter threats.