The pandemic accelerates the digital transformation of enterprises, but digital transformation brings more severe security challenges. The hackers use malicious attacks across a variety of endpoint devices and systems. Thus, the authorities from industry and government agency built various supervision systems and regulations to implement the security protection, therefore, how to effectively implement IT compliance, ensure information security and meet the regulatory requirements of specific industries through international common security practices such as CIS, DISA STIG, PCI-DSS, etc., is an important cornerstone for the success of enterprise digital transformation.