Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » SAS 70

SAS 70

SAS 70 is a standard developed by the American Institute of Certified Public Accountants (AICPA) to evaluate the security controls of service organizations. It guides them and their auditors to demonstrate the effectiveness of their controls to their clients and their clients’ auditors.

SAS 70 is currently replaced by the Statement on Standards for Attestation Engagements (SSAE) 18, which is the current standard for evaluating the controls of service organizations. While the SSAE 18 standard includes the same types of evaluations as SAS 70, it is updated to align with current industry best practices and to reflect changes in technology and the business environment.

Today, SOC 2 audits follow the SSAE 18 standard rather than SAS 70.

Additional reading

GDPR for Dummies: Simple GDPR Guide for Beginners

TL;DR GDPR (General Data Protection Regulation) is an EU law that governs how businesses collect, process, store, and protect personal data of individuals. It applies to any organization handling EU residents’ data, regardless of where the business is located. GDPR gives individuals rights over their data (access, deletion, consent, portability) and requires businesses to ensure…

ISO 27001 Audit Checklist: 5 Steps to Certification

TL,DR: An ISO 27001 audit checklist verifies whether your ISMS meets certification requirements. Preparation includes risk assessment, control mapping, evidence collection, policy review, and management review. The article covers internal audits, certification audits, surveillance audits, and five checklist steps. Preparing for an ISO 27001 audit can feel chaotic. You’re left rushing through control tests, patching…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.

Contact sales