Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
NIST CSF Core Functions
The NIST Cybersecurity Framework (NIST CSF) comprises five core functions – Identify, Protect, Detect, Respond, and Recover. These functions offer guidelines to industries, governments, agencies, and organizations of all sizes, sectors, and maturity to manage their cybersecurity risks effectively. These are further divided into five categories and subcategories. Lets understand each of these:
| Identify (ID): Involves understanding the current risk status of organizational assets like people, facilities, systems, hardware, and software. | ID.AM (Asset Management)ID.BE (Business Environment)ID.GV (Governance)ID.RA (Risk Assessment)ID.RM (Risk Management Strategy) |
| Protect (PR): Aids in securing identified assets by reducing the likelihood and impact of cybersecurity threats while enhancing opportunities. | PR.AC (Access Control)PR.AT (Awareness and Training)PR.DS (Data Security)PR.IP (Information Protection Processes and Procedures)PR.MA (Maintenance)PR.PT (Protective Technology) |
| Detect (DE): Helps teams discover and analyze anomalies and threat indicators that signal an ongoing or previous attack. | DE.AE (Anomalies and Events)DE.CM (Security Continuous Monitoring)DE.DP (Detection Processes) |
| Respond (RS): Supports actions that help mitigate and contain damages caused by a security attack. | RS.RP (Response Planning)RS.CO (Communications)RS.AN (Analysis)RS.MI (Mitigation)RS.IM (Improvements) |
| Recover (RC): Restores operations that have been affected to ensure business recovery and continuity. | RC.RP (Recovery Planning)RC.IM (Improvements)RC.CO (Communications) |
Additional reading
GDPR Compliance Software: How to Evaluate Tools in 2026 (Features, Costs & Use Cases)
TL;DR This guide compares GDPR compliance software across consent tools, privacy operations platforms, and continuous compliance/GRC systems to help organizations choose based on automation depth, data complexity, and scalability. Top GDPR Compliance Software in 2026:1. Sprinto2. Drata3. Netwrix Auditor4. PrivIQ5. LogicGate6. AuditBoard7. Transcend8. OneTrust9. Wired Relations Finding the best GDPR compliance software isn’t about picking…
SOC 2 vs ISO 27001: What is the difference?
TL,DR: SOC 2 is a CPA attestation; ISO 27001 is an accredited ISMS certification, and neither one replaces the other. SOC 2 uses Trust Services Criteria, while ISO 27001 requires Annex A control coverage across the whole organization. Geography still drives the default choice: SOC 2 leads in North America, ISO 27001 carries more weight…
HIPAA Notice of Privacy Practices (What is it and How to Draft It)
TL,DR: A HIPAA Notice of Privacy Practices explains how an organization uses, discloses, and protects PHI. It also tells patients their rights to access information and limit certain disclosures. The article covers what to include, why it matters, and how to draft the notice. Ensuring your clients’ information is secure and well-guarded when running a…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
