## Security Frameworks Overview

Why do we follow frameworks?
1.  **Guidance**: Don't reinvent the wheel. Best practices exist.
2.  **Compliance**: It's the law (or contract).
3.  **Trust**: Customers trust you if you have a badge (ISO/SOC2).

### Types
*   **Regulatory**: HIPAA (Health), GDPR (Privacy). Essential.
*   **Voluntary**: NIST CSF, CIS Controls. Best practice.