Compliance checks verify that systems, processes and people conform to the requirements an organization must meet or has chosen to meet. Those requirements come from laws and regulations, contracts such as the Payment Card Industry Data Security Standard (PCI DSS) for organizations that handle card data, industry frameworks, and the organization's own policies, standards and baselines. The purpose is to produce evidence that required controls exist and operate as intended, and to find gaps before an auditor, a regulator or an attacker does.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.