Compliance is adherence to policies. If your organization is looking into obtaining a compliance report or certification you will need policies that govern your company’s information and cyber security.