Most security standards require a “regular review” of policies, which many companies do with an annual cadence. What could be more ho-hum and boring? But US and international regulations have changed over the last year, and that pace of change is likely to continue for at least a couple of years.
