Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » Security

Security

Security is one of the five trust service criteria of SOC 2. It refers to the protection of information and systems from unauthorized disclosure of information or damages to systems that may result in compromised availability, integrity, confidentiality, and privacy in a way that affects the capacity of the organization to meet its objectives. It seeks to protect:

– Information that is collected, stored, used, transmitted, or processed.

– Systems that leverage electronic information to process, transmit, transfer data to meet its objectives.

Additional reading

HIPAA vs GDPR (Differences and Similarities)

HIPAA and GDPR are two of the most stringent privacy and security frameworks in the world today. While they are similar in many ways (both being regulatory mandates), they seem to operate in completely different industries. HIPAA is laser-focused on the privacy of personal health information within the US and applies mainly to healthcare entities,…

What is Cyber GRC? The Complete Guide

The threat landscape isn’t just noisy, it’s relentless. Ransomware is crippling hospitals left, right, and centre. Supply-chain hacks are rippling across continents. Adversarial nation-states are prying into critical infrastructure while cybercriminals are draining enterprises dry. The cost isn’t measured only in downtime. It’s shareholder value, regulatory penalties, and reputational scars that don’t fade. The stakes…

Risk Appetite vs. Risk Tolerance: Decoding the Differences

When it comes to risk management, even seasoned veterans can mix up terminology—there are a myriad of terms that are meaning-adjacent. A prime example is the misuse of “risk appetite” and “risk tolerance” as interchangeable terms, or even misapplying them entirely. However, It’s only when these two terms are well understood that security teams can…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.