Policies and Controls, Compliance vs Security?

I brought Jim Harryman back to finish the conversation on policies and controls.  We left out a few key pieces.