Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
SSAE
Statement on Standards for Attestation Engagements (SSAE) is a professional standards document that guides practitioners on performing attestation engagements. Attestation engagements are engagements in which a practitioner expresses a conclusion about the reliability of a written assertion made by another party. The SSAE is issued by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA).
Additional reading
NIST Privacy Framework: The Ultimate Guide
TL,DR: The NIST Privacy Framework (January 2020) consists of 3 components: Core (activities for privacy protection), Profiles (current and target privacy states), and Implementation Tiers (levels of risk management rigor) The Core is organized into 5 functions: Identify-P (understanding risks), Govern-P (governance structure), Control-P (data processing management), Communicate-P (stakeholder transparency), and Protect-P (data safeguards) Implementation…
More Money =/= More Security. A Conversation on Budget with Christophe Fuolon
During a recent conversation with Christophe Foulon, a vCISO at Qusitive who has over 17 years of experience, I naively asked him Can we equate bigger cybersecurity budgets with better protection—or are we missing the bigger picture? Christophe didn’t hesitate. “A big budget doesn’t guarantee good security—if it did, we’d never hear of billion-dollar companies…
Your Guide to ISO 42001 Controls for AI Governance
TL;DR ISO/IEC 42001 is the first global standard focused solely on AI governance, not just AI deployment. It addresses ethical, safe, and transparent AI system management through 38 structured controls ISO 42001 Implementation requires cross-functional accountability, continuous monitoring, and alignment with organizational objectives Key challenges include identifying hidden AI systems, unclear ownership, and adapting to…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
