Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » HIPAA » SRA Tool

SRA Tool

The OCR in partnership with the Office of the National Coordinator for Health Information Technology, developed a downloadable Security Risk Assessment (SRA) Tool that guides users through the security risk assessment process by utilizing a simple, wizard-based approach as asked for by the CMS or the Centers for Medicare and Medicaid Service Electronic Health Record (EHR) Incentive Program and the HIPAA Security Rule. Users are guided through threat and vulnerability assessments, multiple-choice questions, and asset and vendor management.

Additional reading

How to create a Vulnerability Management Policy?

According to a recent report, more than 25,000 vulnerabilities were reported in the last two years. Security teams have been tasked with patching every one of these vulnerabilities. But imagine doing so without structured guidance. How cumbersome would that be? This highlights the importance of having a comprehensive vulnerability management policy. It provides a framework…

FedRAMP Certification: Process, Timeline & Costs

In 2020, attackers exploited a compromised software update to infiltrate multiple U.S. federal agencies, including the Treasury and Commerce Departments. It exposed sensitive data and led to a sweeping audit of third-party vendors and cloud providers. The incident highlighted how misconfigured or poorly vetted cloud systems can quickly escalate into a national security vulnerability. This…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.