## 7 Conclusions and Future Work  
The results highlighted strong and moderate correlations between certain standards for security. Future studies could delve deeper into the reasons for these correlations. Understanding the overlapping principles and requirements between these standards could provide insights into how and why they complement or oppose each other. Our analysis provides a snapshot of the correlation matrix at a certain time. However, standards evolve, and it would be insightful to observe how these correlations change over time,especially as updates to standards are released. A granular breakdown of the requirements for each standard could shed light on specific areas of overlap or divergence. For example, understanding which parts of the legislation, such as the GDPR and ISO/IEC 27001:2022, often meet requirements together can help organizations streamline their compliance efforts.  
This study investigated the correlations between different cybersecurity standards and their Security Baselines. Our findings suggest that some standards are more compatible than others and that adhering to multiple standards can provide more holistic coverage of security requirements. However, there are also challenges and costs associated with integrating multiple standards, especially those with negative correlations. The findings of this study have implications for organizations that are trying to comply with multiple cybersecurity standards. Organizations should carefully consider the correlations between different standards when developing their compliance strategies. Organizations should be aware of the challenges and costs associated with integrating multiple standards.  
The current research sheds light on the correlations between different standards; there is a vast landscape of potential explorations. Ensuring compliance is an evolving challenge, and understanding the dynamics between different standards can provide invaluable insights to navigate this complex domain.  
Future research could explore these challenges and costs in more detail, as well as empirically test the effectiveness of adhering to multiple standards in reducing security breaches or non-compliance penalties. Moreover the engagement with industry experts, regulatory bodies, and organizations to gather insights on practical challenges and best practices in standard compliance, while also evaluating how emerging technologies, such as AI and blockchain, impact the adherence to and evolution of cybersecurity standards, ensuring organizations remain at the forefront of compliance innovation. Additionally, future studies could delve deeper into the reasons for the correlations observed in this study. Understanding the overlapping principles and requirements between these standards could provide insights into how and why they complement or oppose each other.  
Conceptualization, S.G. and R.B.; methodology, R.B. and M.S.; validation, M.S., P.S. and V.B.; formal analysis, S.G. and R.B.; resources, P.S. and V.B.; data curation, R.B. and M.S.; writing--original draft preparation, S.G. and R.B.; writing--review and editing, S.G. and R.B.; visualization, R.B. and S.G.; supervision, S.G. All authors have read and agreed to the published version of the manuscript. This research received no external funding. The data presented in this paper are available on request from the corresponding author. The data are not publicly available due to the project not being completed.