Having taken a look at the basic concepts of security, it is now time that we take a look at compliance standards that are used in the industry and how some of the controls are implemented.
The compliance requirements can be for a particular industry, for example HIPAA for Healthcare, PCI for the payment card industry, and so on, or compliance requirements for a region, for example, the European Union has General Data Protection Regulation (GDPR).
These standards have several aspects, including IT, process, and even documentation standards.
In the next section, we will take a look at the IT controls that need to be implemented for one of the compliance standards. I think HIPAA will be good as an example, due to its fairly comprehensive coverage and requirements.