Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Corrective Action
Corrective actions are methodical steps taken by an organization to close gaps, correct errors, or resolve other problems that have been found within the enterprise’s security program and for which the underlying or root cause has also been identified.
Additional reading
How to Conduct a Data Protection Impact Assessment (DPIA)?
TL,DR: DPIA helps identify privacy risks before processing personal data under GDPR Article 35. Run it for high-risk processing, including profiling, children’s data, biometrics, location tracking, or automated decisions. The article explains scoping, stakeholder input, risk evaluation, mitigation planning, and final DPIA reporting. Introduction Data Protection Impact Assessment (DPIA) is a part of the EU’s…
Defense In Depth (DiD): A Castle Approach To GRC With Layered Defenses
TL,DR: Defense in Depth (DiD) combines multiple security layers so that if one is compromised, additional layers continue protecting assets. The U.S. DHS listed DiD as a recommended strategy for industrial control systems The architecture has 3 core layers: physical controls (facility access, surveillance), administrative controls (policies, training, access management), and technical controls (firewalls, encryption,…
Guide to the Digital Operational Resilience Act (DORA)
TL,DR: DORA sets EU ICT resilience requirements for financial entities and critical third-party service providers. It became effective January 17, 2025, after a two-year preparation window. The guide covers applicability, ICT risk management, resilience testing, incident handling, and financial-sector readiness The European Union has long been at the forefront of shaping forward-thinking data policies. After…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
