Compliance, New Threats Drive Security Spending