Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST Cybersecurity Framework (CSF)

NIST Cybersecurity Framework (CSF)

The NIST Cybersecurity Framework (CSF) is a set of best practices that organizations can use to safeguard their data and enhance cyber security. Developed by the National Institute of Standards and Technology (NIST), the framework helps organizations protect critical infrastructure, such as healthcare and manufacturers. 

NIST CSF is flexible, adaptable and widely used to benchmark cybersecurity practices. The framework is built around five core functions: Identify, Protect, Detect, Respond, and Recover. These functions guide the organization’s efforts to strengthen their defenses, improve incident response and ensure resilience in the face of evolving threat landscape.

  • Identify: It involves developing an understanding of the organization’s environment to manage risks
  • Protect: It focuses on implementing protective measures to safeguard the delivery of critical services
  • Detect: It aims to identify the occurrence of cybersecurity events in a timely manner through monitoring and detection processes
  • Respond: It involves developing and implementing an action plan when a cybersecurity event occurs to minimize the spread and impact
  • Recover: It focuses on implementing measures to restore the services impacted by an incident as quickly as possible to ensure business continuity. 

Additional reading

GRC Metrics: KPIs, KRIs, & KCIs Explained + Sample Checklist

As you scale, the amount of people, processes, and technology you add to your infrastructure increases. This not only adds a number of risks into the mix but also creates an unprecedented level of compliance chaos. The emergence of GRC helps to close these gaps.  This module heavily depends on certain metrics – KPIs, KRIs,…

A Quick Guide To Continuous Security Monitoring

According to recent statistics, 60% of the world’s corporate data is stored in the cloud. And 39% of businesses experienced cloud data breaches in the previous year. This suggests that there will always be an element of risk associated with data stored on the cloud. Hence, to safeguard your data from such cyber threats, organizations…

Cyber Hygiene: Maintaining Secure and Healthy Systems

Vint Cerf, one of the internet’s pioneers, is said to have coined the term “Cyber Hygiene” by cleverly comparing brushing teeth to protecting one’s online security.  Whether this story is fact or completely invented, it makes sense. Just like brushing your teeth is a preventive measure against decay and disease, maintaining good cyber hygiene helps…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.