Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Subcontractor
A subcontractor is a third-party entity that a primary contractor hires to carry out particular cybersecurity-related services or tasks on the contractor’s behalf. Services like penetration testing, vulnerability assessments, and incident response may fall under this category.
Additional reading
Risk Assessment Matrix: What Is It + How to Create It
Imagine this: You’re in your weekly team sync. Someone flags a possible vendor breach. A few minutes later, the conversation shifts to a product misconfiguration that might expose customer data. Then there’s a mention of a delayed compliance audit because someone missed a control update. These things come up often. Each one feels serious in…
Third-Party Risk Management Framework: Steps to Select
Over 80% of legal and compliance leaders stated that they discover third-party risks after the initial onboarding and due diligence. This indicates that traditional risk management methods fail to identify new and changing risks. As businesses grow, including third-party vendors in their operations is not uncommon. While this expands their horizons, it also widens their…
Risk Management : A Complete Guide for 2025
“Risk Management lets you appreciate the risk while you let someone else shoulder all the worry.” – Anthony T. Hincks Risk is a natural part of business and any projects you undertake. Whether it’s day-to-day operations or financial choices, risk is always present. But there’s a smart way to handle it: a Risk Management Framework….

Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.



