Legal Regulations, Compliance, and Investigation

You all work in or know of people who work in enterprise IT environments Maintaining the enterprise security posture, legal risk, and security is constantly changing. What makes it so difficult to maintain information security policy, guidelines, and compliance in your organization? What steps can your leadership team take to ensure full compliance is achieved as technologies mature without disrupting the operational norms. 

Note: APA format and no plagarism