Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » Quality Report

Quality Report

A SOC 2 quality report is a document that service organizations use to demonstrate that they have adequate controls, policies, and processes in place to secure customer data. These controls are related to the five trust principles: security, availability, processing integrity, confidentiality, and privacy. Security is the most important and compulsory criterion, while others can be audited for compliance based on business needs.

The report is provided by a CPA (Certified Public Accountant) firm. There are two types of report – Type 1 and Type 2. A Type 1 report provides a snapshot of the service organization’s controls at a specific point in time. A Type 2 report provides a snapshot of the service organization’s controls over a longer period of time, generally six months or longer.

Additional reading

Blogs PCI DSS

6 PCI DSS Compliance Goals You Must Be Aware Of

According to a study from Pew Internet, a US-based fact tank, a whopping 79% of users are cautious about how their information is being used online by companies. Moreover, 59% don’t know what happens to their data after it is collected. This is where the Payment Card Industry Data Security Standard, a.k.a PCI DSS, comes…

Blogs FISMA

Ensuring Federal Information Security: Essentials of FISMA Compliance

2015 saw one of the most notable data breaches related to the U.S. government. Hackers had gained access to 22.1 million records of federal employees from the US. Office of Personnel Management (OPM), including sensitive information such as Social Security Numbers, addresses, etc. The breach led to incidents of identity theft and national security risks—all…

Safeguarding Against Insider Threats: Identification, Prevention, and Tools

Blogs Cybersecurity

Insider Threats in Cyber Security: Types, Indicators, and Mitigation Techniques

60%: That’s the increase in insider risk incidents from 2020 to 2022 (Ponemon Institute). And while external threats continue to garner more attention, insider threats, a far more insidious danger lurks within – your own employees and trusted individuals. Stolen data, crippled systems, and shattered customer trust are just a few of the potential consequences….