Understanding the legal and regulatory requirements that apply to the organization and ensuring compliance.