1 School of Business, Technology and Health Care Administration Capella University, Minneapolis, MN, USA 55402.
2 Department of Information Technology Services, Washburn University, Topeka, Kansas, United States
3 School of Cybersecurity and Information Technology, University of Maryland Global Campus.
4 College of Commerce and Business Management Kakatiya University, Warangal, India.
Review Article
World Journal of Advanced Research and Reviews, 2024, 24(01), 2105–2121
Received on 08 September 2024; revised on 19 October 2024; accepted on 21 October 2024
Security compliance plays a critical role in shaping and enhancing the cybersecurity posture of organizations. It involves adhering to legal, regulatory, and industry standards that govern data protection, privacy, and security measures. Key regulations, such as GDPR, HIPAA, and PCI DSS, along with international standards like ISO/IEC 27001 and NIST, require organizations to implement security frameworks aimed at managing risks, protecting sensitive data, and ensuring the confidentiality, integrity, and availability of information. The impact of security compliance extends beyond regulatory adherence. By implementing compliance frameworks, organizations enhance their ability to mitigate threats, respond to incidents, and recover from security breaches more effectively. These frameworks help ensure that security measures are consistent, well-documented, and aligned with industry best practices. Additionally, compliance fosters organizational accountability by requiring management oversight and promoting a security-first culture across all levels. However, compliance also presents challenges. Organizations must balance the often resource-intensive process of maintaining compliance with the need for a proactive security strategy that addresses emerging cyber threats. Compliance is sometimes viewed as a "check-the-box" activity, which may lead to a gap between regulatory adherence and actual security needs. Furthermore, the constantly evolving threat landscape requires continuous updates to compliance frameworks, which can be costly and complex, especially for multinational organizations operating under different regulatory regimes. Non-compliance can lead to severe consequences, including legal penalties, financial losses, reputational damage, and operational disruptions. As technology and cyber threats evolve, the relationship between security compliance and cybersecurity will continue to grow in importance, with a greater focus on integrating risk-based approaches and automation into compliance management.
Security Compliance; Cybersecurity; Digital Landscape; Review
Preview Article PDF
Adebola Folorunso, Ifeoluwa Wada, Bunmi Samuel and Viqaruddin Mohammed. Security compliance and its implication for cybersecurity. World Journal of Advanced Research and Reviews, 2024, 24(1), 2105-2121. Article DOI: https://doi.org/10.30574/wjarr.2024.24.1.3170