Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » ISO 27001 » Control

Control

Cybersecurity controls are specifically designed mechanism that is used to prevent, detect and reduce cyber-attacks and threats to data, including intrusion prevention systems and DDoS mitigation.

Additional reading

Secureframe vs Vanta vs Drata: Who actually delivers on Compliance? 2026

If you’re just starting your search for a SOC 2, ISO 27001, HIPAA, or GDPR compliance solution, you’ve likely come across three big names: Secureframe, Vanta, and Drata. Each promises to automate evidence collection, streamline audits, and simplify certification. But which one truly delivers on its promises?  Choosing the wrong platform can mean costly delays…

Types of Security Controls With Examples [How to Implement]

In Dec 2022, OU Health, a hospital in Oklahoma, notified about 3000 patients about a breach of their health data after an employee’s laptop was stolen. Sensitive data like treatments, social security numbers, and insurance details were compromised. The incident highlights the importance of implementing all types of security controls. But what are security controls?…

Fisma vs FedRAMP Certification – Major Differences and Similarities

TL,DR: FISMA (2002) sets IT security standards for federal agencies and contractors with one-to-one authorization per agency. FedRAMP (2011) standardizes cloud security with one-to-many authorization covering all agencies FISMA requires system inventory, risk assessments, security plans, control implementation, ongoing monitoring, and annual OMB reviews. FedRAMP requires independent 3PAO assessment and continuous monitoring of cloud services…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.