Application compliance is the process that determines if each application within the application portfolio meets the compliance policy set by the organization. Internal compliance policies typically correspond to external certification requirements (ISO, HIPPA, COBIT). In order to obtain or retain the external certifications, adhering to internal policies is essential. When your application portfolio does not meet compliance policies, you face possible security breach, costly maintenance due to custom extended support, and the potential of discontinued certification.