Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » COBIT » COBIT domains

COBIT domains

COBIT 4.1 breaks down IT governance and management into four key domains, each focusing on specific areas of IT processes. 

Evaluate, Direct, and Monitor (EDM): EDM forms the major component of the COBIT 5 model and concerns itself with the optimal accomplishment of IT business integration and governance. This domain includes identifying directions for IT’s strategic growth, evaluating outcomes and achievements, and creating guarantees of activities’ conformity to standards and regulations.  

Align, Plan, and Organize (APO): APO, on the other hand, is more focused on turning corporate strategies into executable IT projects. This can be defined as taking and documenting IT choices to coordinate IT actions with a company’s goals.

Build, Acquire, and Implement (BAI): In the BAI domain, more emphasis is placed on the practical implementation of IT projects, from development to procurement and integration. It has some features associated with risk management, quality assurance, and good project work.  

Deliver, Service, and Support (DSS): DSS stands for the management of information technology solutions in organizations after implementation. This entails service provision for an organization’s needs, management of events or occurrences, and support for the total IT services to guarantee their efficiency.  

Monitor, Evaluate, and Assess (MEA): MEA is central to proving continuity toward improving IT governance. It is an ongoing process of monitoring IT processes, IT performance, and even the outcomes of IT governance and management practices.

Additional reading

Healthcare Compliance: A Complete Guide to Regulatory Success

Healthcare companies are facing increasing levels of scrutiny over the last few years. Compliance for healthcare companies now covers a wider scope of aspects—bringing in healthcare providers, third, and fourth-party vendors that work with health care providers under its purview.  According to research by the Ponemon Institute published by IBM, the average cost of healthcare…

The Comprehensive Guide to Policy Drift Detection

TL,DR: Policy drift happens when systems, controls, or practices move away from approved policy expectations. The article compares policy drift with configuration drift and explains the audit risk. Detection requires codified policies, runtime checks, contextual alerts, version control, and regular reviews. Policy drifts aren’t just minor irregularities in your system but fractures in your security…

Understanding Penalties for HIPAA Non-Compliance: A Comprehensive Guide

HIPAA compliance penalties can range from monetary penalties to civil lawsuits to criminal charges. The monetary penalties range from $127 to $250,000 depending on the nature of the HIPAA violation. The HIPAA law enforces penalties on organizations processing PHI when instances of non-compliance are discovered. In this article, we talk about the types of penalties…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.