Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » ISO 27001 » Corrective Controls

Corrective Controls

Corrective controls come into action after an information security problem or incident has been detected. These controls are there to make improvements, remedy flaws and guide corrective action.

Additional reading

A Guide to Cloud Security Controls and Frameworks

Cloud security controls are anything and everything that protects your cloud infrastructure from cyber threats and attacks. It ranges from identity and access management (IAM) to network security, encryption, and compliance monitoring. There are some basic cloud security examples that you must be aware of and some complex ones that may be needed in a…

ISO 9001 Auditor: How to Become a Certified Auditor?

TL;DR An ISO 9001 auditor assesses whether an organization’s QMS meets the standard’s requirements, identifies non-conformities, and drives continuous improvement. There are two types: internal auditors (first-party, within the organization) and lead auditors (external, for certification bodies), each with different scope, independence, and training requirements. Becoming one involves understanding the ISO 9001 standard, choosing your…

GRC Metrics: KPIs, KRIs, & KCIs Explained + Sample Checklist

As you scale, the amount of people, processes, and technology you add to your infrastructure increases. This not only adds a number of risks into the mix but also creates an unprecedented level of compliance chaos. The emergence of GRC helps to close these gaps.  This module heavily depends on certain metrics – KPIs, KRIs,…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.