IDSC vocab 7 & 8

Compliance

Adhering to a rule, such as a policy, standard, specification, or law. Regulatory compliance defines the goals companies want to achieve to ensure that they understand and take the necessary steps to comply with policies, relevant laws, and regulations.

Compliance Audit

A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines. Audit reports evaluate the strength and thoroughness of compliance preparations, security policies, user access controls and risk management procedures over the course of a compliance audit.

External Compliance

Also known as regulatory compliance, refers to the measures a company takes to remain compliant with state and federal laws. They are the response to the rules and regulations set for an industry outside of your company

E-Waste

Electronic waste or e-waste describes discarded electrical or electronic devices. Used electronics which are destined for refurbishment, reuse, resale, salvage recycling through material recovery, or disposal are also considered e-waste.

Delegation of Authority

Is the process of transferring decision-making power from one person or group to another. Delegation of authority can be used to make decision-making more efficient and distributed.

GDPR

The General Data Protection Regulation (GDPR) is the toughest privacy and security law in the world. Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU. The regulation was put into effect on May 25, 2018. The GDPR will levy harsh fines against those who violate its privacy and security standards, with penalties reaching into the tens of millions of euros.

Governance

The system by which companies are directed and controlled. Boards of directors are responsible for the governance of their companies. The shareholders' role in governance is to appoint the directors and the auditors and to satisfy themselves that an appropriate governance structure is in place.

Green IT

Green computing, green IT, or ICT sustainability, is the study and practice of environmentally sustainable computing or IT.

Internal Compliance

Following the procedures and best practices laid down by an organization in its ICP. It is an internal mechanism comprising of best practices, guidelines, and policies to minimize risk of legal and international policy violations.

Regulation

the management of complex systems according to a set of rules.

Risk Management (Technology)

any potential for technology failures to disrupt business such as information security incidents or service outages.