Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » HIPAA » BAA

BAA

A Business Associate Agreement (BAA) is a signed agreement between covered entities and business associates. HIPAA privacy rule mandates that covered entities who share PHI with third party service providers specify the responsibilities of each party to secure PHI. 

A BAA must describe the permitted rules to use or disclose PHI and require the business associate to implement appropriate safeguard to maintain the security of PHI. 

Additional reading

AI in the Crosshairs: Google Uncovers Its First AI-Powered Zero-Day Vulnerability

TL,DR: Google’s Big Sleep (formerly Project Naptime), developed with Project Zero and DeepMind, used a Large Language Model to detect a previously unknown stack buffer underflow vulnerability in the SQLite database engine in November 2024 This marks the first publicly documented case of an AI agent discovering a zero-day vulnerability in widely used real-world software…

Cyber Security Goals: Understanding the CIA Triad and How to Achieve It

TL,DR: Cybersecurity goals protect confidentiality, integrity, and availability across data, systems, and user access. The article maps CIA triad outcomes to tools like encryption, access control, backups, and monitoring. Use it to connect security objectives with policies, controls, compliance duties, and measurable ownership. If you’ve ever wondered about the magnitude of power cyber threats hold,…

Healthcare Cybersecurity: Essential Practices for Protection

TL,DR: Healthcare cyber security protects patient data, clinical systems, medical devices, and healthcare operations. Key threats include ransomware, phishing, insider risk, third-party exposure, and data breaches. Strong safeguards include HIPAA controls, access reviews, backups, monitoring, and employee training. In October 2021, a Japanese hospital was forced to shut down operations for months. Malicious actors encrypted…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.