Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » Security

Security

Security is one of the five trust service criteria of SOC 2. It refers to the protection of information and systems from unauthorized disclosure of information or damages to systems that may result in compromised availability, integrity, confidentiality, and privacy in a way that affects the capacity of the organization to meet its objectives. It seeks to protect:

– Information that is collected, stored, used, transmitted, or processed.

– Systems that leverage electronic information to process, transmit, transfer data to meet its objectives.

Additional reading

Third-Party Risk Management Policy

What Constitutes a Good Third-Party Risk Management Policy?

In a recent Gartner survey, 84% of the respondents (who were risk committee members) claimed that third-party risk gaps highly disrupted their business operations.  Any organization that relies on third-party vendors for critical business functions should develop and maintain an effective Third-Party Risk Management policy. A strong third-party management policy can go a long way…
penetration testing

Penetration Testing: Strengthening Your Cybersecurity Defenses

About 60% of businesses are likely to increase the cost of their product or services to make up for the loss incurred due to a data breach. Moreover, the time and effort to contain and mitigate breaches takes a toll on engineering bandwidth and impacts product launch deadlines. Thankfully, you can use various pen testing…
What are Risk Control Measures? Types & Example

Risk Control Measures: Your first line of defense against threats

An underprepared business is one risk materialization away from a tenuous period of operational disruptions, economic downturn, and reputational damage. Risk is a constant in the cybersecurity realm, and while most businesses realize this, their risk readiness says otherwise. According to the 2024 State of Risk Oversight Report, 27% of organizations do not have an…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.