Overview#
Compliance Layer is where an external organization –
government or non-government – specifies requirements which the
Organizational Entity MUST comply with.
Often there are penalties for non-compliance, and sometimes those penalties drive controls right down the stack.
Compliance Layer is where Regulatory compliance and PCI Compliance are implemented.
There might be more information for this subject on one of the following: