What describes the relationship between compliance regimes and security planning?

• A. Compliance has no impact
• B. Compliance regimes drive security planning through governance frameworks
• C. Security planning drives compliance regardless of governance
• D. Compliance is optional

Answer: (B)

Compliance requirements set the mandate and governance structure that shape how security is planned and implemented. They specify the controls, processes, evidence, and accountability that must exist, and they define who is responsible for what. Security planning uses those mandates as a roadmap, deciding which controls to implement, how to assess risk, how to monitor security, and how to document everything for audits. The governance framework ensures the security plan stays aligned with regulatory expectations and that there is clear accountability. So, the relationship is that compliance regimes drive security planning through governance frameworks—the plan is guided by what regulators require, not by an optional or independent process.