Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » ISO 27001 » Logical Controls

Logical Controls

Logical controls are the automated system that manages a person’s ability to access one or more resources, such as a workstation, application, network, or database. A logical access control system requires authentication of an individual’s identity using some mechanism such as a  biometric, personal identification number (PIN) card, or other tokens. Different access privileges can be assigned to different persons depending on their roles and responsibilities within an organization.

Additional reading

FISMA Certification: A Complete Step-By-Step Guide

In 2022, the U.S government introduced FISMA as a part of the E-Government Act. Aimed at protecting information security in the interest of national and economic growth, it explicitly focuses on “risk-based policy for cost-effective security”. If this act applies to your business, understanding the intricacies of the compliance process is essential.  In this article,…

8 Types of Vendor Risks to Identify, Monitor, and Mitigate

TL,DR: Vendor risks include operational, financial, cybersecurity, compliance, reputational, strategic, concentration, and geopolitical exposure. Knowing the risk type helps prioritize controls before vendor issues disrupt business operations. The guide explains practical examples, monitoring methods, and mitigation steps for third-party risk programs. In 2025, over 35% of organizations reported disruptions caused by third-party vendors. The third-party vendor risk…

A Quick Guide to Compliance Documentation

TL,DR: Compliance documentation is the complete record of how an organization meets regulatory obligations, covering policies, controls, evidence, and outcomes. It serves as proof for auditors, customers, and leadership Key documents include security policies, risk assessments, incident response plans, access control records, vendor management documentation, training records, audit reports, and evidence of control effectiveness Common…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.