Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » SSAE 18

SSAE 18

SSAE 18 is a set of updates to the SOC (Service Organization Control) report standards, replacing the previous version, SSAE 16, and the older SAS 70 report. These enhancements aim to improve the quality and usefulness of SOC reports. With these updates, companies will be required to take more responsibility for identifying and categorizing risks and properly managing their relationships with third-party vendors. These changes will help address any gaps identified in the reports of many service organizations, although they are relatively manageable.

Additional reading

PCI Password Requirements & Recommended Controls

TL,DR: PCI DSS mandates passwords of at least 12 characters (8 if system does not support 12), combining lowercase, uppercase, and special characters, changed every 90 days Accounts must lock after failed attempts and remain inaccessible for 30 minutes. Systems must auto-lock after 15 minutes of inactivity. All passwords must be encrypted during transmission and…

What Are Insider Threats and How to Prevent Them?

TL,DR: Insider threats come from employees, contractors, or partners who misuse access intentionally or accidentally. Risks include data theft, privilege abuse, negligence, and policy violations. Least privilege access, monitoring, training, and offboarding controls help reduce insider r 60%: That’s the increase in insider risk incidents from 2020 to 2022 (Ponemon Institute). And while external threats…

Top Compliance Automation Tools for Modern Teams

TL; DR Compliance automation software helps teams manage frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS by centralizing controls, automating evidence collection, continuously monitoring systems, and reducing spreadsheet-driven audit prep. This guide compares 9 compliance automation tools: Sprinto, Drata, Vanta, Hyperproof, Scrut, AuditBoard, Onspring, LogicGate, and ZenGRC, each suited to different…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.

Contact sales