Principled Security Leadership

I don't intend to pose a false trilemma but...

I'm working an a Masters focusing on issues of ethics, leadership, team-building, and problem-solving. This summer I'm researching the literature for examples of principled security leadership. Is a positive, proactive leadership approach that centers on business success more productive than pursuing regulatory compliance or giving in to fearmongering? Citations welcome.