Compliance

Compliance in cybersecurity refers to conforming to laws, regulations, standards, and policies that govern how organizations protect sensitive data. Common frameworks include GDPR (data privacy), HIPAA (healthcare), PCI DSS (payment cards), SOC 2 (service organizations), and ISO 27001 (information security management). Compliance requires implementing specific controls, conducting regular audits, maintaining documentation, and demonstrating adherence. While compliance does not guarantee security, it provides a baseline for effective security programs.