You can deal with Security and Compliance at the executive level now, and invest adequate attention and resources, or you can deal with it later trying to explain to an angry public why you had a data breach or an IT security crisis.