Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » PII

PII

PII refers to Personally Identifiable Information or any information used to identify a person. SOC 2 requires businesses that handle sensitive data to implement appropriate controls to ensure PII’s confidentiality, integrity, and availability.

Examples of PII in a SOC 2 report include names, addresses, telephone numbers, email addresses, social security numbers, and financial information such as credit card numbers and bank account numbers.

Additional reading

What includes in the Scope of GDPR ?

The General Data Protection Regulation (GDPR) aims to protect the privacy and rights of data subjects (individuals) in the European Union by regulating data processing activities conducted by businesses. Controllers or Processors outside the European Union often doubt whether they are required to comply, given that they do not have offices operating in the EU…

Types of Security Controls With Examples [How to Implement]

In Dec 2022, OU Health, a hospital in Oklahoma, notified about 3000 patients about a breach of their health data after an employee’s laptop was stolen. Sensitive data like treatments, social security numbers, and insurance details were compromised. The incident highlights the importance of implementing all types of security controls. But what are security controls?…

Information Security Policy – Everything You Should Know

Your Information Security Policy needs to be robust and protect your organization from internal and external threats. Its scope should be exhaustive, yet it should make room for updates and edits and keep pace with the changing business environments and threats. It sets the tone and foundation for how you plan to protect your organization’s…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.