Compliance with security standards and regulations has been identified as the one way to earn and maintain customer trust and also an important method of defending against malicious insiders. Obtaining certification for compliance with industry security standards and regulations helps improve the overall security capabilities, while alleviating customer concerns about compliance and data security.