Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST 800-145

NIST 800-145

NIST Special Publication 800-145, titled The NIST Definition of Cloud Computing, provides standardized terminology for cloud computing to ensure uniformity across organizations and industries. It outlines the key characteristics, deployment models, and service models associated with cloud computing to enhance understanding and cloud adoption.

NIST 800-145 outlines five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

  1. On-demand self-service: This means that users can allocate cloud resources on demand without manual intervention
  2. Broad network access: It indicates that cloud services can be accessed from a wide range of devices using standard methods such as browsers.
  3. Resource pooling: This indicates that cloud computing resources are pooled to provide service to multiple customers
  4. Rapid elasticity: This means that cloud capabilities can be scaled up and down based on requirements
  5. Measured service: It indicates that the usage of cloud resources is monitored and reported

Three Service models: Cloud service models include Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS).Four deployment models: The deployment models are categorized as public cloud, private cloud, hybrid cloud and community cloud.

Additional reading

HIPAA Updates 2026: Changes Healthcare Organizations Should Prepare For

HIPAA compliance in 2026 centers on updated Notice of Privacy Practices obligations and the 42 CFR Part 2 final rule compliance date of February 16, 2026. Organizations should also prepare for stricter HIPAA Security Rule expectations by strengthening access controls, encryption, asset inventories, testing and documented evidence of ongoing compliance.

PCI Compliance Consultants: How to Choose one

Today digital transactions are the norm, and the impetus of securing sensitive cardholder information is mission-critical. Organizations ensure the safety of payment card data to safeguard their customers’ trust and maintain regulatory compliance. Often organizations bring in a PCI Compliance Consulting service provider for help. These consultants help organizations navigate the intricate landscape of the…

Cybersecurity Audit: Assessing Your Security Effectiveness

Technology has made significant advancements in just the last decade as we went from smartphones to smart homes. We’re more connected than ever before but we’re also more vulnerable than ever before. Cyberattacks occur every 39 seconds on an average, affecting 1 in 3 Americans every year. That’s why cybersecurity has had a paradigm shift…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.