Resources
Plain-language definitions for audit, governance, risk, and compliance terms used in delivery programs.
Shared language that reduces handoff friction between security, audit, and engineering teams.
30 results found
A chronological record of activity showing who performed an action, what changed, and when the change occurred.
OpenCorrective and preventive actions used to address findings and reduce recurrence risk.
OpenA policy, process, or technical safeguard designed to reduce specific risk and meet framework expectations.
OpenThe accountable person responsible for implementing, maintaining, and evidencing a control.
OpenArtifacts proving that a control is designed and operating as expected within a defined period.
OpenThe degree to which required evidence is collected, valid, current, and linked to relevant controls.
OpenA documented gap, exception, or non-conformity identified during audit or review activities.
OpenThe process of aligning controls and evidence across multiple standards to reduce duplicate effort.
OpenGovernance, risk, and compliance activities coordinated to align business objectives and controls.
OpenAn audit performed by an internal team to evaluate control effectiveness and readiness before external assessment.
OpenAn audit performed by an independent assessor to evaluate conformance against defined standards.
OpenAn information security management system standard focused on risk-based control governance.
OpenA privacy information management extension to ISO security controls and governance models.
OpenA framework for AI management system governance and accountability practices.
OpenA cybersecurity framework organized by outcomes such as identify, protect, detect, respond, and recover.
OpenA controls-based assurance model focused on trust principles and operational reliability.
OpenA structured list of risks, owners, treatment plans, status, and review cadence.
OpenA visual matrix showing risk severity based on impact and likelihood dimensions.
OpenActions taken to correct identified gaps and restore expected control effectiveness.
OpenService level agreement targets for response, review, closure, or approval timelines.
OpenA consolidated view of audits, findings, evidence health, and remediation progress.
OpenA document explaining which controls are applicable, excluded, and how decisions are justified.
OpenMovement from one audit stage to another with defined approvals and validation conditions.
OpenA role responsible for evaluating submitted artifacts and confirming quality and completeness.
OpenA record of approval decisions including approver identity, decision, and supporting notes.
OpenThe operating model that defines ownership, review cadence, approvals, and escalation pathways.
OpenA summarized indicator showing progress toward defined audit or framework milestones.
OpenValidation activities used to confirm whether a control is operating as intended.
OpenA predefined sequence of contacts and actions when items exceed SLA or risk thresholds.
OpenUsing one validated artifact across multiple mapped requirements where control intent overlaps.
OpenAuthority Snapshot
Terminology alignment removes handoff friction between security, audit, engineering, and external assurance teams.
Use role-aligned walkthroughs to connect terminology with evidence workflows, CAPA ownership, and reporting standards.
