Compliance & GRC terms
SOC 2, ISO 27001, controls, evidence, and audit readiness
Terms related to governance, risk, compliance, controls, audits, and evidence.
Category snapshot
—
Published terms in this category
…
Published terms
8
Example concepts
3
Learning paths
How to use
Read → connect → practice
Each term links to tutorials, labs, tools, and quizzes so definitions become practical knowledge.
Read the definition
Plain-language explanations with real-world context.
Explore related terms
Build connected knowledge across the same domain.
Practice with resources
Follow linked tutorials, labs, and assessments.
Catalog
Terms in compliance & grc
Published definitions focused on this cybersecurity domain.
Outcomes
What you'll understand
- Decode GRC and audit terminology used by assessors
- Understand control frameworks and evidence collection language
- Connect compliance terms to IT and security operations
- Support audit readiness and risk management workflows
More topics
Explore other glossary categories
Jump between fundamentals, offensive security, blue team, cloud, compliance, and more.
Cybersecurity Fundamentals
Threats, risks, controls, and the CIA triad in plain language
View categoryEthical Hacking & Penetration Testing
Recon, exploitation, OWASP risks, and professional reporting
View categoryWeb Application Security
Authentication, sessions, OWASP Top 10, and secure web design
View categorySOC & Blue Team
SIEM alerts, log analysis, threat hunting, and incident workflows
View categoryMalware & Threats
Malware families, attacker behavior, and threat indicators
View categoryLinux Security
Permissions, SSH, sudo, auditd, and production hardening
View categoryNetworking Security
Protocols, firewalls, VPNs, and traffic inspection basics
View categoryCloud Security
IAM, logging, misconfigurations, and shared responsibility
View categoryDevSecOps
CI/CD security, containers, secrets, and supply chain terms
View categoryIncident Response & Forensics
Containment, forensics, evidence handling, and recovery
View categoryIdentity & Access Security
Authentication, IAM, MFA, privileged access, and directory security
View category