# Cybersecurity compliance explained > Source: https://lscs.io/learn/grc/cybersecurity-compliance/ > What cybersecurity compliance involves — regulatory, contractual and voluntary obligations, how they map to controls, and why compliance is not the same as security. Compliance is the work of demonstrating that your security obligations are being met — to a regulator, an auditor, a customer, or an insurer. It is often the first part of GRC a new analyst is asked to do, because it is concrete: there is a requirement, and either you can evidence it or you cannot. Video: https://www.youtube.com/watch?v=Wi8F-NYLfAI ## What this session covers - Obligations come from three directions: regulation and law, contracts and customer requirements, and voluntary standards the organisation has chosen to adopt. - Mapping is the core skill — taking a requirement and identifying which internal control satisfies it, and what evidence proves it. - One control usually satisfies many requirements across different frameworks, which is why a control-first approach beats a framework-first one. - Evidence needs to be repeatable. A screenshot proves a moment; a documented, scheduled process proves a control. It is worth being clear-eyed about the limits. Compliance demonstrates that specific requirements are met at a point in time. It does not, on its own, mean an organisation is secure — plenty of breached organisations were compliant on the day they were breached. That is not an argument against compliance. It is an argument for treating it as a floor rather than a ceiling, and for making sure the risk process, not the audit calendar, is what actually drives security decisions. ## Go further with mentorship This session is part of our free twelve-week GRC series. If you want structured, mentor-led support to turn this into a job-ready skill set, the LSCS GRC Mentorship programme runs over six months with live sessions, real case studies and interview preparation. [See the GRC Mentorship programme](https://lscs.io/grc-mentorship-course-details/)