Governance, risk, and compliance is often treated as a separate entity from security. But experts know that the two are hopelessly intertwined.