# OPS01-BP04: Evaluate compliance requirements

## Description

Đánh giá các yêu cầu compliance (regulatory, industry standards).

## Implementation Guidance

- Identify applicable regulations (GDPR, PCI-DSS, SOC2, etc.)
- Map compliance requirements to technical controls
- Implement compliance monitoring
- Regular compliance assessments
- Maintain audit trails

## Risk Level

High - Non-compliance can result in fines and legal issues.

## Related Best Practices

- [OPS01-BP03](OPS01-BP03-Evaluate-Governance-Requirements.md)
- [SEC07-BP01](../../02-SEC/SEC07-Data-Data-Classification/SEC07-BP01-Identify-Data-Classification.md)
