Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary Β» ISO 27001 Β» Management Controls

Management Controls

Management controls are actions implemented to manage the development, maintenance, and use of the system, including procedures, system-specific policies and rules of behaviour,  individual accountability, individual roles and responsibilities, and personnel security decisions.

Additional reading

Regulatory Change Management: Process, Tools & Tips

Imagine this: You’re a 500-person company with ten departments, rolling out GDPR protocols since you’re expanding in the EU. A support employee working on a customer ticket downloads a file with personal data to get a β€œquick, unofficial second opinion.” Seems innocent enough, right? But in the GRC world, that’s a major red flag. So…

A Quick Walk-Through of NIST CSF Maturity Levels and Models

Former U.S. Deputy Attorney General Paul McNulty once said, β€œIf you think compliance is expensive, try non-compliance.” And we firmly believe that, and we know you believe that too, as you are serious about implementing NIST CSF maturity levels. So, without beating around the bush, let’s dive in and understand NIST CSF maturity levels and…

ISO 9001 Auditor: How to Become a Certified Auditor?

TL;DR An ISO 9001 auditor assesses whether an organization’s QMS meets the standard’s requirements, identifies non-conformities, and drives continuous improvement. There are two types: internal auditors (first-party, within the organization) and lead auditors (external, for certification bodies), each with different scope, independence, and training requirements. Becoming one involves understanding the ISO 9001 standard, choosing your…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.