Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » ISO 27001 » Surveillance Visit

Surveillance Visit

The primary purpose of the surveillance visits is for the certification body to assert whether your management system really works in everyday operations or not. It will focus on prospects that the certification audit wasn’t able to check: for instance, whether all the incidents are recorded, whether all corrective and preventive actions are properly recorded and implemented, whether all the measurements are made, whether the top management really supports and cares about the system, etc.

Additional reading

Risk Acceptance in Risk Management: Understanding, Strategies & Best Practices

Risk acceptance isn’t glamorous. It doesn’t come with the urgency of mitigation or the decisiveness of avoidance, but it’s often the most sensible route. Every organization encounters risks that are too costly to eliminate or too minor to justify action. The real challenge is knowing when to let something sit and recognizing when it’s time…

ISO 27001:2013 – A Guide to Information Security Management

In response to growing security concerns and breaches, the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) published ISO 27001 in 2005.  It was revised in 2013 to keep the document to sync with global changes in technology and processes, and most recently in 2022. The 2013 version is not significantly different…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.