The compliance standard that's associated with the framework. For example, this could be PCI DSS or HIPAA.