Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » Generic » Cybersecurity – Shared Responsibility

Cybersecurity – Shared Responsibility

The cybersecurity shared responsibility model plays a great role in mitigating the various aspects of the cloud environment. 

For example, in a shared security model with GCP, Google will be responsible for ensuring that their firewalls remain impenetrable, and you, as a google cloud user, will be responsible for ensuring that you have implemented MFA, used a strong password, and don’t access your business environment that’s hosted on  GCP from open public networks. Google is responsible for guarding the cloud service, while you are responsible for guarding your own account in the cloud service.

Moreover, cybersecurity is a responsibility we all share, and each person plays a role in protecting themselves and others. Just one infected computer can spread malware to countless others. To enhance your safety online, you’ve got to follow some basic cybersecurity measures.

Best practices to ensure your online safety

  • Avoid opening suspicious-looking emails or attachments.
  • Create strong passwords and avoid sharing them with anyone.
  • Keep your operating system, browser, and critical software updated by installing updates regularly.
  • Be cautious about sharing personal information online, and use privacy settings to control the information you share.

Additional reading

Defense In Depth (DiD): A Castle Approach To GRC With Layered Defenses

In 2016, the U.S. Department of Homeland Security (DHS) listed Defense in Depth (DiD) as a recommended strategy for improving ‘industrial control system cybersecurity’ practices. This was done in a bid to make systems less attractive to attackers during a period experiencing a sharp increase in cyber incidents.  So, is DiD a new concept or…

ISO 27004 Standard: Key to Evaluating Information Security

Most organizations are aware of the ISO 27001 standard that lists guidelines for establishing and managing an Information Security Management System (ISMS). Businesses implement ISMS controls and devise new policies to improve security posture. So, what does an ISO 27004 standard have to do with all this? Is it a subset or security requirement that…

What is Security Operations Center(SOC) and Why is it Essential

Are you constantly coming across the term ‘SOC’? Curious to learn more about what it stands for, what it encompasses, and—most importantly—what relevance it has in your daily life?  You’re not alone. SOC (Security Operations Center) is a rapidly growing area of security management and one of the most important components of any successful organizational…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.