Risk, Compliance & Controls glossary
54 terms on risk, controls, compliance and operational resilience.
Frequently asked questions
What is the Risk, Compliance & Controls glossary?
It is a reference of more than 50 terms used to manage risk, meet regulations and run internal controls, from enterprise risk management, risk registers and SOX compliance to control mapping, DORA and business continuity. Each entry gives a short definition first, then explains what the term means in practice.
Who is the Risk, Compliance & Controls glossary for?
Risk, compliance and internal audit teams, security and IT leaders, finance and controllership teams, operational resilience leads, and anyone responsible for showing that controls work and obligations are met.
How are the terms organized?
Terms are listed A to Z and tagged by category: risk management; controls and assurance; compliance and frameworks; and operational resilience. Use the search box or the category filters to narrow the list, or jump straight to a letter.
How does control mapping reduce compliance work?
Control mapping links each internal control to every framework and regulation it satisfies, so one control, tested once, can provide evidence for SOX, SOC 2, ISO 27001, DORA and others. When a new requirement arrives, the mapping shows exactly which gaps need work. See common controls framework.
How do risk, compliance and controls fit into the Enterprise Operating Model?
Risk, compliance and controls sit in the Govern & Deliver part of the Enterprise Operating Model. They set the standards the business must meet, map them to the controls that meet them and show where gaps put objectives at risk. Explore standards and controls.