Compliance means living by a set of standards set by an organization/government/independent party.
It helps in defining and achieving IT targets and also in mitigating threats through processes like vulnerability management.