Technical and regulatory definitions across GRC standards
Rules and processes that determine who can access resources and with what privileges.
Periodic evaluation of permissions to ensure access remains appropriate.
Framework that defines obligations and accountability.
Person or function assigned to execute the agreed action.
Governance that evolves with changes in the environment and business.
Tool for collecting data about processes, critical timings, and disruption effects.
Detailed assessment of potential damage from disruptions to key functions.
Structured sequence of activities to execute, monitor, and demonstrate compliance.
Failure in the execution or maintenance of the control during operation.
Set of rules and practices that govern the direction and control of the company.
Systematic evaluation of the level of risk exposed by assets and cyber threats.
Framework to manage the quality, use, and protection of data within the organization.
Corporate framework that aligns controls with organizational objectives.
Compliance with environmental obligations and sustainability best practices.
Risk of negative impacts on the environment and the organization’s sustainability.
Professional responsible for directing the execution and coordination of the engagement.
Control weakness that could result in a material misstatement or significant issue.
Security method that requires more than one form of identity proof.
Evaluation of operational processes to improve efficiency, control, and compliance.
Acceptable risk margin in operations before additional responses are triggered.
Recommended, non-essential control that can be implemented at management discretion.
