Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » ISO 27001 » ISMS

ISMS

ISMS or information security management system (ISMS) is a set of procedures and policies for systematically managing an enterprise’s sensitive information. The goal of an ISMS is to detect and minimize the risk while ensuring business continuity by proactively countering the impact of a security breach.

Additional reading

FISMA Requirements: List of Official Mandates and Practices

The Federal Information Security Management Act (FISMA) is a United States law that came into effect in 2002. Its goal is to guide federal agencies handling sensitive government information systems to develop, document, implement, and maintain security programs that protect their information systems. FISMA also focuses on developing risk-based policy for cost-effective security.  In this…
How to implement role-based access control

How to implement role-based access control?

According to Gartner Analysts, by 2026, more than half of the cyberattacks will be aimed at organizations with weak or no zero-trust controls. Additionally, 10% of enterprises will have a mature and measurable zero-trust program. Zero-trust is based on the principle of holding back trust till something is verified—a principle that is both the present…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.