5 commonly misunderstood compliance terms

Although vendor-written, this contributed piece does not advocate a position that is particular to the author’s employer and has been edited and approved by Network World editors.

In the world of compliance and governance, terms such as certified, compliant and validated have distinct meanings that are often mistakenly used interchangeably.  It is key to understand the terms themselves and how they are used in the industry, so here’s a handy guide.

Before we dive into the specific types of credentials, it is important to understand that there are two fundamental processes that take place during an initial audit – attestation and assurance — that determine the extent to which the audit criteria are fulfilled. Conducting these procedures helps businesses meet third-party risk and compliance requirements and provides information to customers and other stakeholders that validates the integrity of an organization’s control environment.  To put it in simple terms, think of it like a letter of recommendation or evidence showing that something is true:

To read this article in full or to leave a comment, please click here