When we follow compliance frameworks, are we really doing enough? I don't think these frameworks are adapting to risks fast enough! Can this be changed?

I have always wondered about this: "Compliance is the floor, not the ceiling. It is the bare minimum standard of protection..." (read this in this interesting article that-to me-only starts to touch on the issues at hand-[https://www.coguard.io/post/document-your-it-infrastructure](https://www.coguard.io/post/document-your-it-infrastructure)\-I would love this content to dive even deeper...) Tooling is up, data breach is on the rise-why? I feel like standards like CIS Benchmarks and NIST take too long to change-how can we speed this process up? Who is in charge? Anyone have …

compliance cybersecurity doing don fast frameworks