A structured set of guidelines and best practices that organizations follow to meet regulatory requirements, manage risk, and ensure data protection standards are upheld.