Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » SSAE 18

SSAE 18

SSAE 18 is a set of updates to the SOC (Service Organization Control) report standards, replacing the previous version, SSAE 16, and the older SAS 70 report. These enhancements aim to improve the quality and usefulness of SOC reports. With these updates, companies will be required to take more responsibility for identifying and categorizing risks and properly managing their relationships with third-party vendors. These changes will help address any gaps identified in the reports of many service organizations, although they are relatively manageable.

Additional reading

Cyber Security Risk Assessments: How to Protect Your Business

Digital assets and data are the lifeblood of every organization today. But as with everything precious, they’re constantly at risk of being unlawfully accessed, tampered with, stolen, or transmitted. Such malicious actions can not only cause irreparable harm and damage to the organization but can severely hamper future business prospects.  Cyber risk assessments are periodical…

Top ISO 27001 Certification Companies: Global Leaders in Information Security Audits

TL; DR ISO 27001 ensures businesses meet international standards for information security, helping them manage risks, protect data, and comply with regulatory requirements like GDPR and HIPAA.  Choosing an accredited ISO certification body (e.g., UKAS, ANAB) is crucial. Regular internal audits, a well-documented compliance process, and effective compliance training ensure long-term certification success. Costs vary…

Risk Quantification: How to Measure, Prioritize, and Justify Risk Decisions

Today, expanding your technology stack comes with a hidden cost: increased risk.  Each new sysOrganizations today are facing more risk than ever, and it is coming from every direction. Whether it is new systems going live, infrastructure expanding, or vendors being added, each of these additions introduces new risks. As a result, security teams quickly…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.