Align information security practices with compliance frameworks and obligations (access control, logging, secure development, incident readiness). Use when mapping security controls to regulatory or certification requirements, or preparing security compliance evidence.
