Which of the following best describes an organization's obligation to adhere to laws and regulations that govern data protection in the region where it operates?
Password guidelines
Compliance to regulatory requirements
Disaster recovery policies
Change management procedures
Access control standards