Continuous Compliance

Compliance

Adherence to laws, regulations, guidelines, and specifications relevant to an organisation's business.

Regulatory Technology

Technology solutions designed to help companies comply with regulations efficiently and cost-effectively.

Data Privacy

The proper handling of personal data including collection, storage, processing, and sharing in compliance with regulations.

Data Protection Officer

An individual responsible for overseeing an organisation's data protection strategy and regulatory compliance.

Control Framework

A structured set of controls and processes designed to manage risk and ensure compliance with regulations.

Sanctions Screening

The process of checking individuals and entities against government-issued lists of sanctioned parties.

Incident Reporting

The formal process of documenting and communicating security incidents, breaches, or compliance violations.

Regulatory Sandbox

A controlled environment where businesses can test innovative products and services under regulatory oversight.

EU AI Act

The European Union's comprehensive legislation establishing rules for the development and use of AI systems based on risk levels.

Compliance as Code

The practice of expressing regulatory and security compliance requirements as machine-readable policies that can be automatically validated against infrastructure and application configurations.

AI Audit

An independent assessment of an AI system's compliance with regulatory requirements, ethical standards, and organisational policies, examining data, models, outputs, and governance.

The application of ethical principles and moral standards to business activities, decisions, and relationships.

The process of identifying, assessing, and controlling threats to an organisation's capital and operations.

The governance framework for identifying, measuring, and mitigating risks arising from AI and analytical models.

A document defining the permitted use of an organisation's IT resources and networks.

Control Objectives for Information and Related Technologies — a framework for IT governance and management.

The international standard for AI management systems that specifies requirements for establishing, implementing, maintaining, and improving AI governance within organisations.

A legal concept giving individuals the right to request deletion of their personal data from organisations' records.

A chronological record of system activities enabling the reconstruction and examination of a sequence of events.

Monitoring

The continuous observation of system performance, availability, and health using automated tools and dashboards.