How do businesses try to balance security with business operations?

The regulatory environment has required a large commitment from business in terms of security, audit and compliance. How do businesses try to balance security with business operations? How has this tightened security affected employee privacy and productivity?