Organizations spend almost 8 hours a week on security compliance