Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
ASV
An Approved Scanning Vendor (ASV) is an entity that verifies whether a company’s PCI DSS external scanning requirements have been met. ASVs use techniques similar to those used by hackers, such as penetration testing, to run an external vulnerability assessment of a company’s network or website. A quarterly network scan by an approved scanning vendor is required for all complying businesses.
Additional reading
HIPAA Certification Cost [Updated 2025 + Free Checklist]
The most common HIPAA budgeting mistakes include underestimating the costs of certification, overlooking the need and costs of ongoing compliance and not updating budgets regularly. This in turn poses a challenge for founders to balance HIPAA certification costs with other business priorities. From preliminary prep work to audit expenses and post-audit maintenance, the costs can…
What is Key Risk Indicator ? How to measure KRIs
Maintaining constant oversight and proactively responding to threats remains one of the biggest challenges for most security professionals. And while they do go that extra mile to strengthen their security posture and minimize any damage, no effort in this regard can be truly effective without strong Key Risk Indicators or KRIs in place. A KRI…
8 Steps to Get PCI Compliance for Small Business
The Payment Card Industry Data Security Standards (PCI DSS) is a compliance framework that sets guidelines for any organization processing card transactions to ensure the protection of sensitive cardholder information. However, with four distinct levels of PCI DSS and the need to interpret and map requirements to specific controls, achieving compliance can be an intensive…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.