The Evolving Landscape of Regulatory and Compliance

First, let’s take a high-level look at all sub-functions that should be addressed as part of Regulatory and Compliance. The following image captures much of what the Regulatory and Compliance function entails.

Figure 15.1: Sub-functions of the Compliance & Regulatory function

It is important to work with both regulation and compliance hand in hand. At a high level, cybersecurity regulation is derived from the laws put in place to ensure you are implementing the requirements set forth and the best practices to protect the people, technology, data, and information within your organization. In addition, many regulations have an emphasis on the reporting and transparency of data breaches in a timely manner. On the other hand, the compliance component is to ensure any required regulation is being conformed to, in addition to other items such as audits, standards, policies, etc. As a leader, it’s important...