---
title: "Align with top-tier security standards using Cerbos"
description: "Ensure you are able to easily demonstrate your compliance with international security standards through Cerbos' policies and audit logs."
canonical: "https://www.cerbos.dev/features-benefits-and-use-cases/security-standards"
source: "https://www.cerbos.dev/features-benefits-and-use-cases/security-standards"
---

# Align with top-tier security standards using Cerbos

Ensure you are able to easily demonstrate your compliance with international security standards through Cerbos' policies and audit logs.

## The imperative of security standards in today's digital landscape

In an era where data breaches and cyber threats are rampant, adhering to recognized security standards isn't just a best practice—it's a necessity. These standards, such as HIPAA, GDPR, SOC2, PCI DSS, ISO27001, and CCPA are designed to safeguard sensitive information and ensure that organizations maintain a robust security posture. Non-compliance can lead to hefty fines, reputational damage, and loss of customer trust. A component of adhering to these standards is rigorous access control, which can be handled thorough Cerbos' policies and audit logs.

### Demonstration of access control compliance

```json
{
  "timestamp": "2023-01-05T15:51:13.150492178Z",
  "requestId": "01GP1A25FW6BVX9JWYM9M6T0Z0",
  "principal": {
    "id": "sally",
    "roles": ["USER"],
    "attr": {
      "region": "EMEA",
      "department": "SALES"
    }
  },
  "resource": {
    "kind": "expense",
    "id": "expense1",
    "attr": {
      "status": "PENDING",
      "amount": "40",
      "region": "EMEA",
      "vendor": "Expense 1",
      "approvedBy": "frank",
      "createdAt": "2023-01-03T15:45:55.461Z",
      "ownerId": "sally"
    }
  },
  "action": "view",
  "effect": "EFFECT_ALLOW",
  "policy": "resource.expense.vdefault",
  "effectiveDerivedRoles": ["OWNER"]
}
```

This sample log entry indicates that user "sally" was allowed to view "expense1" based on the expense resource policy (default version). These logs are a critical part of ensuring your compliance when it comes to access control.

## Achieve and maintain access control compliance with Cerbos

- [Audit logs documentation](https://docs.cerbos.dev/cerbos/latest/configuration/audit) — Understand the intricacies of setting up and managing audit logs with Cerbos
- [Staying compliant – What you need to know](https://www.cerbos.dev/blog/staying-compliant) — Understand the key elements of compliance that should be prioritized
- [More on audit logs](https://www.cerbos.dev/features-benefits-and-use-cases/audit-logs) — Discover the importance of audit logs, and Cerbos' audit log capabilities
- [Importance of data security](https://www.cerbos.dev/blog/the-importance-of-data-security-for-startups) — Mitigate risks and cultivate trust among customers
- [Community discussions](https://community.cerbos.dev/?_gl=1*5ozo82*_ga*MTk1NjcwNzQ1MC4xNjY2Mjc5NjI2*_ga_8G3G3MS838*MTY5NDE5MTE5Ny41MjcuMS4xNjk0MTkyNzgyLjIwLjAuMA) — Engage with peers and learn from their experiences on audit logging and access control compliance with Cerbos