Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST 800-145

NIST 800-145

NIST Special Publication 800-145, titled The NIST Definition of Cloud Computing, provides standardized terminology for cloud computing to ensure uniformity across organizations and industries. It outlines the key characteristics, deployment models, and service models associated with cloud computing to enhance understanding and cloud adoption.

NIST 800-145 outlines five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

  1. On-demand self-service: This means that users can allocate cloud resources on demand without manual intervention
  2. Broad network access: It indicates that cloud services can be accessed from a wide range of devices using standard methods such as browsers.
  3. Resource pooling: This indicates that cloud computing resources are pooled to provide service to multiple customers
  4. Rapid elasticity: This means that cloud capabilities can be scaled up and down based on requirements
  5. Measured service: It indicates that the usage of cloud resources is monitored and reported

Three Service models: Cloud service models include Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS).Four deployment models: The deployment models are categorized as public cloud, private cloud, hybrid cloud and community cloud.

Additional reading

cloud compliance

Cloud Compliance Overview: How To Achieve it ?

Cloud computing undoubtedly provides agility and flexibility to businesses. But with all the benefits it affords, it also introduces inherent security risks. Each cloud infrastructure type has its inherent vulnerabilities and this makes it essential to ensure that the provider upholds the highest standards of security and meets regulatory requirements. Without understanding these risks and…
7 Top Third-party Risk Management Software in 2024

7 Top Third-party Risk Management Software in 2025

According to a recent study, 62% of data breaches are attributed to vulnerabilities in third-party relationships. This highlights the importance of robust third-party risk management (TPRM) tools. As business relationships grow more complex, TPRM solutions have emerged as pivotal shields in fortifying businesses against risks associated with third-party associations. In this blog, we will discuss…

The Complete Guide to Mastering RFP Responses

An RFP response isn’t just a formality-it’s a test. It’s where companies prove they’re a good fit and the right choice. The stakes are exceptionally high for security and compliance teams, where every answer is scrutinized for risk, credibility, and alignment with regulatory standards. A vague or inconsistent response can slow negotiations or raise red…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.