Understandably, most businesses prioritize compliance when it comes to security risks. But as KnowBe4 CEO Stu Sjouwerman explains, a compliance mindset can create a false sense of security in the world of cyber threats. Compliance is an ongoing business concern, especially in the world of cybersecurity. Compliance is actually the biggest driver (59 percent) of the identification of an organization’s security needs instead of business risk reduction. This is probably because an increasing number of regulatory bodies mandate that organizations abide by security standards like GDPR, HIPAA and SOX. Organizations spend large amounts of money, time and resources trying to meet audit requirements, and when they successfully meet criteria and pass tests, they often get a false sense of security that they are battle-ready against real-world cyber threats. Unfortunately, this is far from true. Compliance is only a small part of cybersecurity, and there are many reasons why compliance is inefficient in reducing cyber risks.