Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is compliance risk management?

Risk management describes the process of proactively identifying potential risks, analyzing those risks, and taking precautions to minimize risks; compliance risk management describes an organization’s process of managing the risk of non-compliance with pertinent regulations. Because compliance risk management looks different for different companies, each company should develop an appropriate compliance risk management program that is designed to suit its specific business processes and regulatory compliance concerns.


Taking into consideration the speed at which business changes and the variety of regulations with which businesses must ensure their compliance — including SOC 2, GDPR, HIPAA, ISO, and other rules and standards — an organization should consider how it can best develop an integrated company-wide compliance strategy.


A comprehensive compliance risk management strategy enables an organization to understand and effectively address potential threats to its ability to conduct its business.

Additional resources you might like:

GDPR
Blog
How to make your website GDPR compliant in 8 steps

Learn the essential steps to achieve GDPR compliance for your website. Click here to learn the requirements and organizational benefits of GDPR compliance.

Compliance
Blog
How to choose the best access review software: A buyer’s guide

Learn why access review software is essential and how to choose and implement the right solution.

GDPR
Blog
GDPR basics: Everything you need to know to keep your business compliant

Learn the basics of GDPR, what GDPR compliance means for your organization, and how the GDPR rights granted to those in the EU may impact your business.

Additional resources you might like:

GDPR
Blog
How to make your website GDPR compliant in 8 steps

Learn the essential steps to achieve GDPR compliance for your website. Click here to learn the requirements and organizational benefits of GDPR compliance.

Compliance
Blog
How to choose the best access review software: A buyer’s guide

Learn why access review software is essential and how to choose and implement the right solution.

GDPR
Blog
GDPR basics: Everything you need to know to keep your business compliant

Learn the basics of GDPR, what GDPR compliance means for your organization, and how the GDPR rights granted to those in the EU may impact your business.

GDPR
Blog
GDPR compliance for US companies: Step-by-step guide

Learn how GDPR impacts US organizations and what it takes to achieve compliance.

GRC
Blog
How to choose the best risk management software for your organization

Understand how to manage rising organizational risk and what to look for in the right risk management software.

GDPR
Blog
An actionable guide to GDPR compliance for startups

Learn what GDPR compliance means for startups and how to achieve it while building trust and scaling with confidence.

Compliance
Blog
How to choose the best regulatory compliance software: A buyer’s guide

Find out what to look for in compliance software as AI and regulatory requirements continue to change.

Security
Events
The CISO Playbook: How Security Leaders at Calm, Perforce, Xactus, and Vanta Drive Outcomes

Hear from CISOs at Calm, Perforce, Xactus, and Vanta for The CISO Playbook - a panel on how enterprise security leaders demonstrate value to boards, manage risk at scale, and align security programs with growth and executive expectations.

Security
Blog
9 AI risks that could impact your organization—and how to mitigate them

Discover the nine most relevant AI risks that can threaten your network and systems, and explore some practical strategies to proactively mitigate them.