Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Data Protection Directive 95/46/EC
The Data Protection Directive protects the personal data and rights to privacy of EU citizens, making it an essential piece of legislation. It was enacted in October 1995 in the form of Directive 95/46/EC, and has since been at the foundation of modern protection standards for personal data within the European Union.
Additional reading
ISO 27001 Policy Template: Key Sections & Free PDF
TL,DR: ISO 27001 policy templates help document security expectations and risk-management responsibilities. Common templates cover access control, incident response, asset management, and business continuity. Each policy should define purpose, scope, roles, risk treatment, and training expectations. Implementing ISO 27001 can feel like staring at a blank page with a looming deadline. Defining security controls, documenting…
ISO 27001:2013 vs ISO 27001:2022 | Differences & Transitioning
The transition deadline for ISO/IEC 27001:2013 has passed. As of October 31, 2025, all ISO 27001:2013 certificates are no longer valid and if your organization has not yet completed the transition to ISO/IEC 27001:2022, you are now operating without a recognized certification. That means real exposure: audit failures, contractual breaches with customers who require valid…
Common Cloud Vulnerabilities and How to Fix Them?
TL,DR: Cloud vulnerabilities include misconfigurations, weak IAM, exposed data, compliance gaps, and exploitable infrastructure flaws. The guide uses the Capital One breach to show how cloud misconfiguration can expose large datasets. It covers vulnerability types, attacker trends, monitoring, Zero Trust, and stronger cloud security controls. A recent report states that 4 out of 5 security…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
