Skip to content

Compliance

What is Compliance?

The state of conforming to laws, regulations, standards, or internal policies. In information security, compliance is typically demonstrated through audits, certifications, and continuous monitoring.

Compliance

What the standards actually require on compliance

Requirements naming compliance across 6 standards, quoted from the control text.

Comply at all times with all applicable tax reporting obligations and national, international and industry best practice, including the US Foreign Account Tax Compliance Act where applicable.

uae-virtual-asset-regulatory-authority-vara-regulations::CRM-II · Compliance and Risk Management Rulebook II: Tax reporting →

Management develops, implements and monitors a process to measure IT compliance with the board-approved policies, supplementing internal and third-party audit with periodic self-assessments whose scope and frequency depend on the scale and track record of the...

ffiec-it-examination-handbook::MGT-III.D.4 · III.D.4 Policy Compliance (Management) →
ISO 37302:202532 controls

How the compliance policy is set and compliance objectives are established. It is rated on two dimensions, each against the five-level scale in 5.2. Policy and procedures with conduct and culture: level 1, no procedures;

iso-37302-2025::6.1.8 · Compliance policy and setting of objectives →
ISO 37303:202531 controls

Members of the compliance function should show the behaviour that supports a compliance culture: integrity and visible commitment to compliance; independence and freedom from conflicts of interest; the confidence to face tests and challenges;

iso-37303-2025::A.2.2.7 · Behaviour for supporting compliance culture →
ISO 37301:202130 controls

In line with this document, the organization shall set up, put in place, keep and continually improve a CMS, together with the processes it needs and how those processes interact;

iso-37301-2021::4.4 · Compliance management system →

Ensure compliance with [Assignment: organization-defined registration requirements for functions, ports, protocols, and services].

NIST800-CM-7(3) · CM-7(3) Least Functionality | Registration Compliance →

Questions people ask about compliance

What is Compliance?
The state of conforming to laws, regulations, standards, or internal policies. In information security, compliance is typically demonstrated through audits, certifications, and continuous monitoring.
Why is Compliance important for compliance?
Compliance is a key concept in Compliance. Understanding compliance helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to Compliance?
Key concepts related to Compliance include Audit, Certification. Understanding these interconnected concepts provides a more comprehensive view of Compliance requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Compliance?
Compliance appears in the requirement text of UAE Virtual Asset Regulatory Authority (VARA) Regulations, FFIEC IT Examination Handbook, ISO 37302:2025, ISO 37303:2025, ISO 37301:2021. Across these standards we have identified 199 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Compliance?
Explore our compliance framework pages to see how compliance applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Compliance applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.