A report looks at the changes compliance, detailing how security leaders address compliance investments, framework updates, tooling and automation.