Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary Β» ISO 27001 Β» Organizational Controls

Organizational Controls

Organizational controls reduce or mitigate the risk to the organization’s assets, including people, property, and data and include any type of policy, technique, procedure, method, solution, action, plan, or device designed to help accomplish that goal.

Additional reading

What is Consensus Assessments Initiative Questionnaire (CAIQ)?Β 

In June of 2023, the automaker Toyota revealed that around 260,000 customers’ data was exposed online due to a misconfiguration in its cloud setup. Though the breach didn’t expose a huge amount of sensitive data, it shows how a simple mistake can give hackers an opening. This is why a Consensus Assessments Initiative Questionnaire (CAIQ)…

GDPR Cookie Consent: Protecting User Privacy and Data

Key Points Introduction Cloud-hosted companies that operate websites with global traffic must know about GDPR and cookies. In May 2020, the EU released an update to clarify their specific position around cookie usage.  Cookies give important insights to companies about the activity of their website visitors.Cookies are small files sent by websites to the visitor’s…

ISO 27001 vs PCI DSS: Similarities & Differences

Companies handling sensitive customer data and payment information are under pressure to comply with not just one, but multiple security frameworks. It’s no longer a question of if you’ll need to prove compliance, but how many certifications you’ll be asked to show. One framework wants proof that your entire business manages information risk; the other…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.