A regulator is a public authority that sets and enforces rules, limits, or approval conditions for an activity or industry. In cybersecurity, regulators may establish requirements for protecting data, reporting incidents, managing suppliers, or securing critical infrastructure.
Regulatory rules shape how organizations design and operate systems: they can require security controls, audits, certifications, or approval before certain technologies are deployed or transferred. In dual-use sectors such as space, government may act both as a major customer and as a regulator, influencing which security standards and suppliers are acceptable. Compliance helps reduce risk and accountability gaps, though organizations still need to assess threats beyond the minimum rules.