Covers running compliance as an ongoing operation: ISO/IEC 27001, SOC 2, PCI DSS and HIPAA requirements, common controls mapped across frameworks, and audits. Explains evidence collection, continuous compliance automation, compliance as code, policy management and GRC platforms such as Vanta and Drata.