Compliance demands drive security spending