Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » PCI DSS » Compensating Controls

Compensating Controls

Also referred to as Alternative Controls, it is a set of security and privacy controls implemented by an organization in lieu of the NIST Special Publication 800-53 to mitigate risks and provide an alternative approach to achieving the same security objectives as primary controls. They are often used to reduce the impact of security breaches or data loss when standard controls are not functioning as intended or when you cannot implement primary security controls due to technical or operational limitations. Compensating controls should be appropriately documented and regularly reviewed to ensure their effectiveness.

Additional reading

How to Make Your Existing Gmail Account HIPAA Compliant

If there’s one group of people who are constantly under attack from phishers, it’s healthcare providers. Doctors, nurses, or employees who use Gmail to share sensitive data are more likely than others to have their sensitive data compromised.  To protect your business from being non-compliant with federal HIPAA (Health Insurance Portability and Accountability Act) law,…

PCI DSS 4.0 Compliance: Everything You Should Know

The Payment Card Industry Data Security Standard (PCI DSS) has undergone a significant update with version 4.0. As a business handling payment card data, understanding these changes is crucial for maintaining compliance and protecting sensitive information. This post delves into the key aspects of PCI DSS 4.0, highlighting: We’ll guide you through the most important…

How To Get SOC 2 Audit For Small Businesses

As a forward-looking small business aiming to attract large and enterprise clients, Know that questions about the security makeup and overarching security practices come up in most sales conversations. A SOC 2 audit then becomes a single source of truth for validating the effectiveness of security infrastructure, controls, and personnel. Integrating SOC 2 audits in…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.