Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST 800-145

NIST 800-145

NIST Special Publication 800-145, titled The NIST Definition of Cloud Computing, provides standardized terminology for cloud computing to ensure uniformity across organizations and industries. It outlines the key characteristics, deployment models, and service models associated with cloud computing to enhance understanding and cloud adoption.

NIST 800-145 outlines five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

  1. On-demand self-service: This means that users can allocate cloud resources on demand without manual intervention
  2. Broad network access: It indicates that cloud services can be accessed from a wide range of devices using standard methods such as browsers.
  3. Resource pooling: This indicates that cloud computing resources are pooled to provide service to multiple customers
  4. Rapid elasticity: This means that cloud capabilities can be scaled up and down based on requirements
  5. Measured service: It indicates that the usage of cloud resources is monitored and reported

Three Service models: Cloud service models include Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS).Four deployment models: The deployment models are categorized as public cloud, private cloud, hybrid cloud and community cloud.

Additional reading

Governance Vs Compliance: Similarities, Differences and Common Misconceptions

When viewed from the outside, it is easy to misinterpret the results from compliance as indicators of good governance. For example, a partner might assume that passing a compliance audit signifies good leadership, a security-first culture, and a proactive approach to risk management. However, the company may have achieved compliance using a reactive approach and…

HIPAA Compliance: Ensure Privacy & Security (Download Free Checklist)

TL,DR: HIPAA compliance protects PHI under Privacy, Security, and Breach Notification Rules. It applies to covered entities and business associates that create, process, store, or transmit PHI. The article covers risk assessments, BAAs, training, encryption, access controls, penalties, and breach timelines. The HIPAA 1996 Act sets regulatory measures to ensure the security of sensitive patient…

PCI DSS Audit: A Complete Guide + Downloadable Checklist

TL;DR Willie Sutton, the infamous twentieth-century U.S. criminal, was allegedly known to rob banks because “that’s where the money is.” In this digital age, organizations are exposed to financial fraud due to their lax security- leaving sensitive consumer data stolen and misused.  To protect against this, PCI DSS (Payment Card Industry Data Security Standard) was…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.