Following the laws, rules and contract terms that apply to your business.
Like keeping your business licence and safety inspections current: boring until the day someone asks to see them.
Policies, records and reviews are vCIO outputs. Compliance documentation as its own card is still being shaped.
Which rules apply to me? It depends on your industry and the data you hold. A review can list them.

Every WILDCARD card exists to solve one named problem. Find yours.