The practice of conforming to relevant laws, regulatory requirements, and industry security standards through the implementation of risk-based controls is known as cybersecurity ______.

### Why this is right The course asks how organizations achieve compliance and gives risk-based controls as the solution. Controls are selected in relation to the risks and requirements the organization must address. ### The concept A control is a measure used to support a security outcome or address a risk. A risk-based approach avoids treating every safeguard as equally important in every situation. The organization first needs to understand relevant risks and requirements, then choose controls suited to them. This is why risk analysis is part of starting a compliance program. Controls need monitoring because choosing a measure does not prove that it is working. ### Terms - **Risk-based control**: a safeguard selected in response to an assessed risk or requirement. - **Risk analysis**: a process for examining risks so that decisions about controls can be made. ### Remember Compliance is achieved through controls that respond to identified risks, then checked through monitoring.