Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST CSF Informative References

NIST CSF Informative References

Informative references in NIST CSF are the sources that help to achieve a particular requirement. These sources are mapped to other guidelines, frameworks, or practices that are common among all sectors. 

For example, the Identify function in NIST CSF includes the subcategory that requires users to build an inventory for their physical devices and systems. The informative references for achieving this include the following: 

  • CIS CSC 1 
  • COBIT 5 BAI09.01, BAI09.02 
  • ISA 62443-2-1:2009 4.2.3.4 
  • ISA 62443-3-3:2013 SR 7.8 
  • ISO/IEC 27001:2013 A.8.1.1, A.8.1.2 
  • NIST SP 800-53 Rev. 4 CM-8, PM-5

Additional reading

enterprise cybersecurity

Enterprise Cybersecurity Architecture With Solutions & Best Practices

As your business scales, the risks you face and the threat landscape you get exposed to expand. Conventional cybersecurity practices may not make the cut anymore, given your organization’s maturity.  An enterprise cybersecurity program calls for a more sophisticated and integrated architecture with top-notch solutions. This blog talks about how your program needs to evolve,…
vanta alternatives

Top 6 Vanta Competitors & Alternatives – Detailed Comparison

If you are looking for a compliance and security automation solution, in all probability, you considered Vanta. Being the first to enter this space, they boast an impressive list of customers. But bigger doesn’t necessarily mean better – with more competitors offering the same and often better features, your search for the best solution should…
article 15 gdpr

Article 15 GDPR Right of access by the data subject

Article 15 of the General Data Protection Regulation (GDPR) empowers the data subject to exercise their right to know the information their employers hold about them. Are your employees (current/former) asking you to produce the information you have about them? Should you consider oral requests, What’s the TAT for response time and what are the…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.