Security Compliance and Certification
Security is no longer a nice-to-have or we’ll implement that in v2 element. It is required by laws, regulations, and certifications. Customers are demanding it so they don’t fall foul of laws and regulations or lose their own certifications.
Achieving and maintaining compliance with the requirements of the regulatory and certification bodies is an ongoing task, as these requirements evolve as new exploits, concerns, and impacts. This chapter will provide you with a starting point for conversations about what bars you’ll need to clear to showcase that your business is compliant with the latest standards.
In this chapter, we’ll discuss the following topics:
- Legal and regulatory concerns
- Commercial certification requirements
- Frameworks to help you tick the boxes
- Documenting your compliance for regulators, certifiers, and customers
