Carbon Black Interview Question

Where do security and compliance overlap, if at all?