Audit trail
A chronological record of who did what and when in a system.
Related: Log management, SOC 2
Compliance & Governance
Glossary category
Compliance & Governance
Indian and global regulations and standards, from the DPDP Act to ISO 27001.
21 terms
Terms in Compliance & Governance
CERT-In directions
Indian Computer Emergency Response Team
Rules from India's national cyber agency, including reporting certain cyber incidents within 6 hours and keeping logs for 180 days.
Related: Incident response, Log management, DPDP Act
Compliance & Governance
CIS Controls
A prioritised set of security best practices from the Center for Internet Security.
Compliance & Governance
Compliance automation
Using software to continuously collect evidence, monitor controls and prepare for audits.
Related: Continuous compliance monitoring, GRC, SOC 2
Compliance & Governance
Consent manager
Under India's DPDP Act, a registered entity that helps people give, manage and withdraw consent for use of their data.
Related: DPDP Act, Data fiduciary
Compliance & Governance
Continuous compliance monitoring
Automatically and constantly checking that security controls meet regulatory requirements.
Related: Compliance automation, GRC, Audit trail
Compliance & Governance
Data fiduciary
Under India's DPDP Act, the organisation that decides why and how personal data is processed.
Related: DPDP Act, Consent manager
Compliance & Governance
DPDP Act
Digital Personal Data Protection Act, 2023
India's Digital Personal Data Protection Act, 2023, which governs how organisations collect, process and protect personal data.
Related: Data fiduciary, Data breach, DLP
Compliance & Governance
GDPR
General Data Protection Regulation
The European Union's data protection law governing how personal data of people in the EU is handled.
Related: DPDP Act, Data fiduciary, Data breach
Compliance & Governance
GRC
Governance, Risk and Compliance
Governance, risk and compliance: aligning IT and security with business goals, managing risk and meeting regulations.
Related: Compliance automation, Risk assessment, vCISO
Compliance & Governance
HIPAA
Health Insurance Portability and Accountability Act
A US law that sets rules for protecting patients' health information.
Related: Compliance automation, Encryption
Compliance & Governance
IRDAI cybersecurity guidelines
Information and cyber security rules from India's insurance regulator for insurers and intermediaries.
Related: RBI cybersecurity framework, SEBI CSCRF
Compliance & Governance
ISMS
Information Security Management System
A documented system of policies and controls for managing information security, central to ISO 27001.
Compliance & Governance
ISO 27001
An international standard for setting up and running an information security management system.
Related: ISMS, SOC 2, Risk assessment
Compliance & Governance
NIST CSF
NIST Cybersecurity Framework
A widely used framework from the US National Institute of Standards and Technology for managing cybersecurity risk.
Related: ISO 27001, CIS Controls, Risk assessment
Compliance & Governance
PCI DSS
Payment Card Industry Data Security Standard
A security standard for organisations that store, process or transmit payment card data.
Related: Tokenization, Encryption, Compliance automation
Compliance & Governance
RBI cybersecurity framework
Reserve Bank of India rules that set cybersecurity requirements for banks and regulated financial entities.
Related: CERT-In directions, SEBI CSCRF, DPDP Act
Compliance & Governance
Risk assessment
Identifying, analysing and prioritising risks to an organisation's information and systems.
Related: GRC, ISO 27001, Vulnerability management
Compliance & Governance
SEBI CSCRF
Cybersecurity and Cyber Resilience Framework
SEBI's Cybersecurity and Cyber Resilience Framework for regulated entities in India's securities market.
Related: RBI cybersecurity framework, CERT-In directions, Cyber resilience
Compliance & Governance
SOC 2
A US audit framework that reports on how a service provider protects customer data.
Related: ISO 27001, Compliance automation, Audit trail
Compliance & Governance
VAPT
Vulnerability Assessment and Penetration Testing
Vulnerability assessment and penetration testing: finding security weaknesses and testing whether attackers can exploit them.
Related: Vulnerability management, CERT-In directions
Compliance & Governance
How NetNXT covers compliance & governance
These terms describe the work our Compliance Automation service does for clients. The service page sets out what it includes.