The regulations some companies are subject to encompass many aspects of your business, including your IT. IT-relevant regulations typically focus on security and data protection. They provide a baseline of best practices for IT and security. They do not prescribe detailed solutions. This leaves it to your business to identify specifics.