Discussion Question

I need a 2 paragraph 12pt APA paper, discussing the following question:

As a risk manager, should you approach regulations as a risk to information systems? Do you see regulations as important measures to strengthen information security or as ways to exert unnecessary control over organizations?

I need at least 1 paragraph for the following: In response to your peers, research any organization as a point of reference or use your own place of work in discussing why regulations are important measures or ways to exert unnecessary control over organizations.