Which statement best defines cybersecurity compliance?

### Why this is right Cybersecurity compliance is a control function: it helps an organization meet obligations and requirements by ensuring that relevant rules, policies, and procedures are followed. The definition covers more than regulatory checklists. ### The concept Compliance connects organizational requirements to day-to-day conduct and controls. Requirements may come from laws, policies, or other obligations that apply to the organization. Compliance can help protect the organization and support stakeholder trust, but it cannot guarantee that an attack will never happen. It is also broader than a document: people must follow applicable requirements, and the organization must monitor whether its controls are working. ### The other options - **B. A one-time technical test that guarantees no cyberattack will succeed**: a test may provide evidence about security, but neither testing nor compliance guarantees that attacks will fail. - **C. A document that describes optional security recommendations only**: optional recommendations are more like guidelines, while compliance concerns meeting obligations and requirements. - **D. A process limited to checking government regulations**: regulations can be relevant, but the course defines compliance more broadly and rejects a checkbox-only view. ### Terms - **Cybersecurity compliance**: the control function concerned with meeting an organization's cybersecurity obligations and requirements. - **Control**: a measure used to address risk or support a required security outcome. ### Remember Compliance means meeting applicable requirements through organizational action, not merely completing a regulatory checklist.