Cybersecurity compliance is only a government-regulation checkbox and has no protective purpose.

### Why this is right The statement is false because the material explicitly distinguishes cybersecurity compliance from a government-regulation checkbox. Compliance is a formal way to help protect an organization from cyberattacks and meet its broader obligations. ### The concept A compliance function helps turn obligations into rules, policies, procedures, and controls that guide organizational behaviour. It can support trust with stakeholders and reduce reputational harm. It also helps define how and why an organization operates. Compliance does not mean that every attack is prevented, but it can help reduce unforced errors and improve consistency. ### The other options - **True**: this would wrongly reduce compliance to regulatory paperwork and ignore its protective and organizational purposes. ### Terms - **Stakeholder**: a person or group affected by, or with an interest in, an organization's activities. - **Unforced error**: an avoidable mistake arising from an organization's own actions or omissions. ### Remember A compliance program should support protection and trustworthy conduct, not just document regulatory status.