Comment by kristianc

They're one and the same thing. Compliance is a way of demonstrating that you have met certain data and information security standards.