Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » PCI DSS » XSS

XSS

Cross-Site Scripting (XSS) is a security vulnerability which allows a cyber threat actor to inject malicious code into a web page viewed by other users to steal their sensitive information or perform unauthorized actions. The attacker exploits the vulnerabilities in the website’s code and then injects scripts that can be executed in the website users’ browsers. The cyber threat actors use XSS attacks to steal login credentials, credit card details, session tokens, and more to perform fraudulent activities.

Additional reading

How to get started with GRC implementation

6 Steps GRC Implementation Roadmap: A quick guide

Over time, businesses have experienced their fair share of realizations and revelations that have become the key drivers for GRC implementation. In the face of the interconnected nature of risks, they have learned that sticking to their traditional siloed practices is a recipe for disaster. They have also grappled with regulatory complexities and cyber threats…
third party due diligence

What is Third Party Due Diligence – 6 Steps process to achieve

According to a recent study, 62% of data breaches stem from vulnerabilities in third-party relationships, highlighting the importance of rigorous third-party due diligence practices. As businesses forge complex alliances, robust third-party due diligence becomes a critical defense against inherent risks and exposure. Third-party due diligence practices are an essential safeguard for SaaS enterprises that manage…
defense in depth

Defense In Depth (DiD): A Castle Approach To GRC With Layered Defenses

In 2016, the U.S. Department of Homeland Security (DHS) listed Defense in Depth (DiD) as a recommended strategy for improving ‘industrial control system cybersecurity’ practices. This was done in a bid to make systems less attractive to attackers during a period experiencing a sharp increase in cyber incidents.  So, is DiD a new concept or…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.