In day-to-day security operations, management is constantly juggling two very different forces. There are the structured demands of compliance and then unpredictable behavior of cyber criminals.