Hot answers tagged compliance
The ideas you mentioned are great already, here is what I would consider in addition to that. I don't consider a limited budget, deciding where to invest is up to you. Some of those approaches can be pretty expensive: Infrastructure: ISO 27001 is another possibility if you want to certify your data center. Well known and accepted in the security community. ...
Assuming you mean potential compliance issues a website might encounter: PCI DSS (credit card information) HIPAA (medical records privacy) This list can be quite long depending on the industry and country the business is in.
It doesn't necessarily rid you of it but it does reduce your potential exposure. If you handle or store any data covered by PCI DSS standard, and if you use relay response you will, then you have to make sure you meet the portion of the standard that applies to that data.
Only top voted, non community-wiki answers of a minimum length are eligible