Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Data Controller
A Data Controller in GDPR is defined as the natural or legal person, public authority, agency, body who alone or in joint collaboration determines the means and purpose by which the data will be processed.
Additional reading
Build Your Vendor Risk Management Framework Now: Because ‘Too Late’ Hurts
TL;DR A vendor risk management program is a comprehensive approach to identifying, assessing, and mitigating risks associated with third-party vendors. Vendor risk assessment often overlooks the potential for “fourth-party risk” – the risk posed not by your direct vendors, but by their vendors. This cascading effect can create unexpected vulnerabilities in your supply chain. Third-Party…
Compliance Risk Management Explained: Steps, Examples & Solutions
TL;DR Compliance risk management is the structured process of identifying, assessing, prioritizing, and mitigating risks that arise from failing to follow laws, regulations, or internal policies. Unmanaged compliance risk can lead to fines, failed audits, operational disruption, lost deals, and reputational damage. The typical process includes measuring compliance maturity, conducting risk assessments, identifying gaps, implementing…
What is FISMA Compliance – 7 FISMA Compliance Checklist
FISMA, or the Federal Information Security Management Act, was introduced in 2002 (and updated in 2014) to improve the cybersecurity of federal systems. It requires all US federal agencies to create security plans to protect their networks. In simple terms, it makes cybersecurity a must-have for government agencies, ensuring their IT systems are secure and…

Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.





