Compliance — ISO 27001, SOC 2, and the rest — can feel like pages of cryptic requirements. A plain-language guide to what these frameworks actually ask of you.