1.1. Describe security and compliance concepts