Using Compliance Budget to Advance Security Priorities