Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » PII

PII

PII refers to Personally Identifiable Information or any information used to identify a person. SOC 2 requires businesses that handle sensitive data to implement appropriate controls to ensure PII’s confidentiality, integrity, and availability.

Examples of PII in a SOC 2 report include names, addresses, telephone numbers, email addresses, social security numbers, and financial information such as credit card numbers and bank account numbers.

Additional reading

GRC Incident Management: Framework, Best Practices & Automation

TL,DR: GRC incident management connects incident response with risks, controls, audits, and reporting obligations. The article recommends a loop: detect, triage, escalate, CAPA, evidence, and review. Use it to track security events, vendor issues, audit findings, and privacy incidents in one process. Most mid-market teams still split incident management and GRC: Ops handle tickets while…

Regulatory Change Management: Process, Tools & Tips

TL,DR: Regulatory change management tracks legal, policy, and control changes that affect audits and compliance. The article explains how poor change handling creates privacy, training, and evidence gaps. You’ll learn how to monitor obligations, update procedures, assign ownership, and stay audit-ready. Imagine this: You’re a 500-person company with ten departments, rolling out GDPR protocols since…

A Complete Guide on Security Incident Management 2026

TL,DR: Security incident management helps organizations detect, respond to, and recover from cyber incidents. It includes preparation, identification, containment, eradication, recovery, and review. A clear process reduces downtime, confusion, financial impact, and compliance risk. With increased dependence on cloud solutions, remote work, bring-your-own-device policies, and other digital advancements, concepts like zero trust security, cyber insurance,…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.