Compliance and Legal Issues is an information security competency addressing the adherence to IT security regulations and laws. This involves understanding related legislative and contractual requirements, managing risks associated with these obligations, and implementing strategies to ensure ongoing compliance with security protocols.

Level 1: Emerging

At an emerging level, you are familiar with key compliance regulations and legal issues relevant to information security. Your knowledge is limited, but developing, and you strive to improve.

Level 2: Proficient

At a proficient level you are able to interpret and apply relevant compliance regulations and legal requirements to ensure information security measures are in place and effective within the organization.

Level 3: Advanced

At an advanced level, you are able to proactively identify, interpret, and address complex compliance and legal issues related to information security, ensuring organizational adherence to regulations and standards.