Adhering to laws, regulations, standards, and contractual requirements relevant to your organisation.
Compliance means meeting the laws, regulations, industry standards, and contractual obligations applicable to your organisation. Compliance requirements vary by industry (healthcare, finance, defence), geography (UK, EU, US), and customer demands. Compliance is not the same as security—you can be compliant yet insecure, or secure yet non-compliant. Effective programmes address both, using compliance requirements as a baseline while building genuine security capability.
Why It Matters
The DSC Perspective:
Compliance is mandatory, not optional. Non-compliance brings legal penalties, lost contracts, and reputational damage. Understand your specific compliance obligations and build programmes that achieve compliance while delivering real security.