Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » COBIT » IT Infrastructure Library

IT Infrastructure Library

IT Infrastructure Library, abbreviated as ITIL, is a compilation of guidelines for managing IT services to enhance service levels. One of the primary objectives of ITBM is to ensure that IT services remain relevant to the business agenda and on track as that agenda evolves.

ITIL has evolved a lot over the years. The first version was upgraded and enlarged and gradually became the present international standard. Today, the newest description of the ITIL framework is ITIL 4, but it is more useful to understand the framework’s evolution than to value the current version.

The current one is ITIL 4, which came in 2019, while ITIL 3 has been in practice since 2007. ITIL 4 is more contemporary to use compared to ITIL V3, and its major change is that since ITSM is mainly about delivering value to customers and users through IT services, it aims to establish stable environments, control costs, manage risks, and provide support services. 

Another major change in ITIL 4 is that this framework places a great emphasis on automation. This removes service management from IT’s dominion and promotes interaction and teamwork throughout the enterprise. Overall, this goes beyond the conventional service lifecycle approach.

With that being said, ITIL 4’s framework is built around four essential factors for successful value delivery:

  • Organizations and people: Organise the management of people in the firm so that their human capital reflects the business’s strategic plan.
  • Information and technology: Again, security should always go hand in hand with technology, and more emphasis should be given to how data is managed.
  • Partners and suppliers: Bring together external stakeholders to easily facilitate service delivery.

Value streams and processes: Processes that increase demand and convert it into value should be managed.

Additional reading

How Beneficial is SOC in 2026 (SOC Benefits)

TL,DR: A Security Operations Center (SOC) serves as the organization’s quick response team against cyberattacks, typically led by a CISO who creates, implements, and continuously improves cybersecurity policies and frameworks The 7 key SOC benefits are continuous 24/7 monitoring, immediate threat response with severity-based prioritization, centralized security visibility, reduced breach costs through faster detection, regulatory…

What Is An ISMS? Components, Implementation & Best Practices

TL,DR: An ISMS is a framework of policies, procedures, and controls for managing information risk. The article explains how ISMS work supports confidentiality, integrity, availability, accountability, and stakeholder trust. It also covers components, rollout steps, common challenges, and ISO 27001 alignment. Most companies don’t start out thinking they need an ISMS. They arrive there when…

What Is a HIPAA Consent Form and Why It Matters?

TL,DR: A HIPAA consent form lets covered entities use or disclose PHI under defined conditions. It should explain PHI use, patient permissions, privacy duties, complaint rights, contacts, purpose, and expiration. The article covers consent versus authorization, when HIPAA requires authorization, and includes a downloadable template. Healthcare practices and research centers access, transmit and store patient…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.