Risk Management - Concept
Compliance
Following the laws, regulations, contracts and policies that apply to how an organisation operates
What's it for?
Helps an organisation follow the laws, contracts and rules that apply to its work.
For example…
To meet UK GDPR rules, a company records why it is allowed to use customer information and keeps evidence that staff have completed the required training
A financial-services firm keeps evidence of access reviews and security training so it can show auditors that required controls are being followed
Think of it like…
Building codes: minimum standards so the structure is safe for everyone inside