Problem Statement
Explain three common compliance frameworks used in cybersecurity and the differences between them.
Explanation
Common compliance frameworks include ISO 27001 (an information security management standard), NIST Cybersecurity Framework (CSF) which provides a risk-based approach with functions Identify, Protect, Detect, Respond and Recover, and GDPR for data protection law in Europe. :contentReference[oaicite:6]{index=6}
ISO 27001 focuses on establishing an ISMS and controlling information security risk. NIST CSF gives a high-level structure organisations can use to manage security risk and integrate with other standards. GDPR is a regulatory law that applies to personal data protection and has legal penalties for non-compliance. Understanding how they differ helps you explain framework selection and obligations in interviews.
