Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
TSC
The Trust Service Criteria (TSC) are the specific criteria that must be met in order for a service organization to achieve compliance with SOC 2. The TSC are divided into five categories: security, availability, processing integrity, confidentiality, and privacy. Within each category, there are specific controls and requirements that must be implemented and maintained in order for the service organization to meet the TSC and achieve SOC 2 compliance.
Additional reading
The Essential Guide to Data Governance Frameworks
TL,DR: Data governance frameworks define how data is collected, stored, used, protected, and owned. Core components include mission, stakeholders, data products, policies, quality, security, and monitoring. The article compares framework examples and explains how to build governance that supports compliance. As data becomes a vital component in fuelling business strategy and outcomes more than ever…
Understanding Risk Avoidance in Business
TL,DR: Risk avoidance eliminates high-impact risks entirely by choosing not to engage in activities that expose the organization to financial loss, non-compliance, or reputational damage NIST SP 800-39 defines risk avoidance as the appropriate response when identified risk exceeds the organization’s risk tolerance level Risk avoidance is one of four response strategies alongside acceptance (tolerating…
GRC Incident Management: Framework, Best Practices & Automation
TL,DR: GRC incident management connects incident response with risks, controls, audits, and reporting obligations. The article recommends a loop: detect, triage, escalate, CAPA, evidence, and review. Use it to track security events, vendor issues, audit findings, and privacy incidents in one process. Most mid-market teams still split incident management and GRC: Ops handle tickets while…

Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.





