Risk-ready or rule-bound? How APAC is grappling with an evolving threat landscape

Some organisations are risk-averse around not complying, so that’s why they invest resources. If you actually unpack the cost of them not managing compliance, that cost could ultimately be much higher. In the end, compliance for compliance’s sake is not always commercially viable. It may constrain resource allocation for sound business outcomes. So it’s a balance between managing regulatory risk and enabling organisations to achieve strategic objectives within acceptable risk parameters.