Information security requirements are a collection of legislation, guidelines, frameworks, and industry-specific regulations to which organizations are either required or recommended to comply with in order to improve cybersecurity, mitigate risk, and avoid legal consequences. Information security requirements may differ depending on the industry or geographic region of the organization.