Information Security Handbook

Determining compliance requirements

Prior to providing information security architecture guidance for your information system, you must look at your organization's regulatory and compliance requirements, making sure that you are building a set of security requirements that results in a secure and compliant information system.

The compliance requirements that an organization needs to follow have a significant effect on the overall shaping of an information system. The requirements imposed by various laws and compliance frameworks vary depending on the law and the framework, and it is critically important that you understand your framework in order to ensure that your organization can successfully continue to do business.

The services provided ...