Oracle Exam 1Z0-457 Topic 1 Question 32 Discussion

* A compliance framework maps to a set of compliance standards that perform a collection of checks following broadly accepted best practices to ensure that IT infrastructure, applications, business services and processes are organized, configured, managed, and monitored correctly.

* A compliance standard refers to one or more compliance standard rules.

Note: A compliance framework can be used to represent a framework such as Control Objectives for Information and related Technology (COBIT) or Payment Card Industry (PCI). A compliance framework is an industry-specified best practices guideline that deals with the underlying IT infrastructure, applications, business services and processes, and how they are organized, managed, and monitored. Compliance frameworks are hierarchical to allow for direct representation of these industry frameworks.