In the old days, when people had important documents they wanted to keep secure, they would lock them in a filing cabinet. The only people who could access the files would have a key or would need to contact the file administrator. 

Cybersecurity and compliance are important building blocks for a healthy IT infrastructure. Some organizations assume that once they have these two elements in place, they have checked the box and their IT environment is secure.