Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
BAA
A Business Associate Agreement (BAA) is a signed agreement between covered entities and business associates. HIPAA privacy rule mandates that covered entities who share PHI with third party service providers specify the responsibilities of each party to secure PHI.
A BAA must describe the permitted rules to use or disclose PHI and require the business associate to implement appropriate safeguard to maintain the security of PHI.
Additional reading
Hyperproof Alternatives: Compare Top 5 Competitors
Choosing the right solution for your business, in a way, is like Schrodinger’s cat. Unless you start using the tool, it could be the best choice or a complete disaster. Either way, you must do your due diligence – many Hyperproof alternatives make big claims. The proof, however, is in the pudding. So, we did…
How To Develop An Effective GRC Strategy?
At the 2022 MetricStream GRC Summit, Michael Rasmussen illustrated the interconnectedness of business risks using a “forest and trees” analogy. Imagine the complex business environment as a forest. Understanding how each tree (or risk) fits into the bigger picture is important because a minor vulnerability can escalate and set the entire forest ablaze. In other…
What is Dora Certification? Steps to get Dora Certification
As of 17 January 2025, potentially 50% of all organizations subject to DORA compliance in the EU and beyond have missed the deadline to comply with the Digital Operational Resilience Act (DORA). If your organization is still looking to achieve DORA certification, it’s high time! The clock is ticking, and the penalties might be climbing…

Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.



