Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » NIST » NIST 800-145

NIST 800-145

NIST Special Publication 800-145, titled The NIST Definition of Cloud Computing, provides standardized terminology for cloud computing to ensure uniformity across organizations and industries. It outlines the key characteristics, deployment models, and service models associated with cloud computing to enhance understanding and cloud adoption.

NIST 800-145 outlines five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

  1. On-demand self-service: This means that users can allocate cloud resources on demand without manual intervention
  2. Broad network access: It indicates that cloud services can be accessed from a wide range of devices using standard methods such as browsers.
  3. Resource pooling: This indicates that cloud computing resources are pooled to provide service to multiple customers
  4. Rapid elasticity: This means that cloud capabilities can be scaled up and down based on requirements
  5. Measured service: It indicates that the usage of cloud resources is monitored and reported

Three Service models: Cloud service models include Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS).Four deployment models: The deployment models are categorized as public cloud, private cloud, hybrid cloud and community cloud.

Additional reading

ISO 27001 Audit Checklist: 5 Steps to Certification

Preparing for an ISO 27001 audit can feel chaotic. You’re left rushing through control tests, patching gaps, and frantically ensuring that each control effectively maps to ISO/IEC 27001 requirements and business context. Navigating this chaos without an ISO 27001 audit checklist that outlines the right steps, is like playing the game of whack-a-mole, where you…

Difference between ISO 9001 and ISO 27001 [2024]

ISO 27001 is an information security compliance framework designed to help businesses deploy information management security systems (ISMS) to protect sensitive information. But how does ISO 9001 fit into this? If it does work? Should you get it? And what if you are already ISO 27001 compliant? What would the addon look like? In this…

Corporate Governance Issues: Common Challenges in 2025

With digital transformation and the rise of big data, organizations are being pushed to implement robust governance practices. The sheer volume of data, new technologies, and changes is staggering, and it has created the need for moderation and strong governance.  For businesses struggling to scale while keeping up with changes, it is time to rethink…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.