Security vs governance
Security protects; governance standardizes and enforces guardrails. Security: protect workloads and data from threats. Governance: define and enforce standards over time. Security controls do not equal governance controls. They overlap in real environments.