Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
De-Identified Information
De-Identified Information is health information that does not identify an individual if covered entities hold that there is no reasonable cause to believe that it can be used to identify an individual.
The HIPAA privacy rule specifies two methods to de-identify PHI.
– Expert determination method which applies statistical or scientific principles to conclude that there is very small risk that the recipient can identify the individual.
– In the Safe harbor method, 18 identifiers are removed.
Additional reading
Top Device Security Gaps That Delay SOC 2 Audits and How to Fix Them
SOC 2 audits rarely get delayed because your organization has no security controls at all. More often, the delay comes from controls your team follows informally but cannot prove consistently. Device security is one of the most common places this happens. Laptops, desktops, mobile devices, BYOD endpoints, and remote work devices all touch company systems…
The Comprehensive Guide to Policy Drift Detection
TL,DR: Policy drift happens when systems, controls, or practices move away from approved policy expectations. The article compares policy drift with configuration drift and explains the audit risk. Detection requires codified policies, runtime checks, contextual alerts, version control, and regular reviews. Policy drifts aren’t just minor irregularities in your system but fractures in your security…
Implementing IT Governance Frameworks: Best Practices for Business Alignment
TL,DR: An IT governance framework aligns IT strategy with business goals by guiding the implementation of governance practices. Examples include COBIT (IT and business alignment), ITIL (service management), and ISO 38500 (international governance standard) IT governance ensures that IT investments contribute to improved performance by establishing policies that guide resource use, minimize risks, and achieve…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
