Question: what is the difference between assurance and compliance?
Answer: Compliance doesn't provide information over the operating effectiveness of those controls. ... Where compliance provides proof of existence and maybe implementation (design) of policies, procedures and controls, assurance tells us about their operational effectiveness.