The issue of information security and regulatory compliance affects organizations of all sizes and from all sectors, with an identical problem, their inherent vulnerability and high cost of compliance to multiple regulations. Unfortunately in most cases, the regulations and laws set forth do not require the use of, or offer any guidance of any specific security measures or standards, instead leaving the decision up to the company. This causes a sea of confusion, misinterpretation and drives costs to intolerable levels.
