Talk to us Sign in

Compliance Glossary

Clear definitions for compliance teams navigating digital regulatory standards.

Browse by category

Browse A-Z

Showing 191 terms

A

AI Management System (AIMS)

Access Recertification

Accredited Certification Body

Algorithmic Transparency

Approved Scanning Vendor

Article 49 Derogations

Attestation Report

Attribute-Based Access Control

Authentication and Authorization

Automated Individual Decision-Making and Profiling

B

Binding Corporate Rules

Breach Notification

Business Associate Agreement (BAA)

Business Continuity Plan

Business Impact Analysis

D

Data Breach Register

Data Classification

Data Controller

Data Inventory and Mapping

Data Lifecycle Management

Data Localization

Data Loss Prevention

Data Minimisation

Data Processing Agreement

Data Protection Authority

Data Protection Impact Assessment

Data Retention Policy

Data Subject Access Request

Department of Health and Human Services (HHS) Office for Civil Rights

Disaster Recovery Plan

Dynamic Consent

E

EU-US Data Privacy Framework

Encryption at Rest

Encryption in Transit

End-to-End Encryption

Endpoint Protection

Essentially Equivalent Protection

European Commission

European Data Protection Board

Explicit Consent

F

FATF Recommendations

Family Educational Rights and Privacy Act

FedRAMP Authorization

Federal Information Security Management Act (FISMA)

Federal Trade Commission

Firewall Configuration

Forensic Investigation

Fourth-Party Risk

Fundamental Rights Impact Assessment

G

GLBA Safeguards Rule

General Data Protection Regulation

General-Purpose AI (GPAI)

Governance, Risk, and Compliance (GRC)

Gramm-Leach-Bliley Act

H

HIPAA Privacy Rule

HIPAA Security Rule

HITRUST CSF Certification

Health Information Technology for Economic and Clinical Health Act

Health Insurance Portability and Accountability Act

High-Risk AI System

Human Oversight

I

ISO 27001 Certification

Identity Federation

Identity Governance and Administration

Implementation Tiers

Incident Response Plan

Incident Triage

Information Security Management System

Internal Controls over Financial Reporting

Intrusion Detection System

J

Just-in-Time Access

K

L

Lawful Basis for Processing

Legitimate Interest

M

Master Data Management

Model Explainability

Money Laundering Reporting Officer

Multi-Factor Authentication

N

NIST AI Risk Management Framework

NIST Cybersecurity Framework (CSF) 2.0

NIST Risk Management Framework

NIST SP 800-171

NYDFS Cybersecurity Regulation

National Institute of Standards and Technology

Network Segmentation

Nonpublic Personal Information

North American Electric Reliability Corporation Critical Infrastructure Protection

O

Onward Transfer

Organizational Profile

P

PCI Security Standards Council

Personal Data Breach

Personally Identifiable Information

Points of Focus

Post-Incident Review

Principle of Least Privilege

Privacy by Design and by Default

Privileged Access Management

Prohibited AI Practices

Protected Health Information

Provisioning and Deprovisioning

Pseudonymization

Public Key Infrastructure

Purpose Limitation

Q

Qualified Opinion

Qualified Security Assessor

R

Records Retention Schedule

Records of Processing Activities

Right of Access

Right to Data Portability

Right to Erasure

Right to Object

Right to Rectification

Right to Restriction of Processing

Right to be Informed

Right-to-Audit Clause

Risk Acceptance

Risk-Based Approach

Role-Based Access Control

S

Sarbanes-Oxley Act

Security Incident

Segregation of Duties

Service Level Agreement

Simplified Due Diligence

Special Categories of Personal Data

Standard Contractual Clauses

Statement of Applicability

Storage Limitation

Supply Chain Risk Management

T

Third Country Transfer

Third-Party Risk Management

Threat Modeling

Transfer Impact Assessment

Trust Services Criteria

U

USA PATRIOT Act

V

Vendor Due Diligence

Vendor Risk Assessment

Vendor Security Questionnaire

Vulnerability Assessment

Vulnerability Scanning

Z

Zero Trust Architecture