Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Qualitative Risk Assessment
Qualitative risk assessment is the process of identifying risks and analyzing the impact they would have on a project. Project managers can prioritize risk as per probability and impact while detecting the main areas of risk exposure and improving understanding of project risks.
Additional reading
Vendor Management Framework Explained (and How to Build One for Your Org)
TL,DR: A vendor management framework governs vendor selection, onboarding, monitoring, renewals, and offboarding. It links vendor oversight to security, compliance, business continuity, and defined approval ownership. You’ll learn framework benefits, risk controls, evidence expectations, and vendor lifecycle discipline. The worst thing about vendor management isn’t that companies do it badly. It’s that they think they…
HIPAA vs SOC 2: Key Rules, Scope, and Compliance Steps
TL,DR: HIPAA is a legal requirement for PHI; SOC 2 is a voluntary assurance report. You need HIPAA for health data and SOC 2 when customers ask for control proof. The article compares scope, rules, flexibility, enforcement, security controls, and when teams need both. Your team already has a SOC 2 report in place. For…
SOC 2 Controls: Complete List, Examples, and Requirements for Compliance
TL;DR SOC 2 has no universal controls checklist: organizations design their own to meet the AICPA’s Trust Services Criteria, with Security mandatory and Availability, Confidentiality, Processing Integrity, and Privacy added as needed. The Security category includes nine common criteria: control environment, risk assessment, monitoring, logical access (MFA, RBAC, password policies), physical access, change management, system…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
