Regulatory compliance hogs security pros’ attention