Terminology
Here is a list of terminology used in this guide:
|
Usage |
Explanation |
|
Continuous Compliance |
It is an AI-enabled compliance offering delivered through the COMPASS platform. |
|
Environment Manager (EM) |
EM is the context engine that COMPASS platform uses to deliver multiple offerings. |
|
COMPASS |
AI-native Technology Platform that enables service providers to provide different offerings. |
|
Human-in-the-loop verification |
GRC Experts |
|
CTP |
AI generated Control Testing Procedures: Method used to verify whether a security, compliance, operational, or financial control is designed appropriately and operating effectively. |
Personas
|
Personas |
Who they are |
|
Service Provider |
An organization comprising GRC experts who have expertise in standards and regulatory frameworks. |
|
Service Provider Admin |
Administrators in the service provider org who help setup clients for their compliance requirements |
|
Compliance Manager |
GRC experts in the service provider org who manage clients in their continuous compliance efforts. |
|
Client |
An organization that enrolls a service provider for managing their compliance program. |
|
Task Owners |
Employees in Client organization, responsible for providing compliance evidence corresponding to their functional domain. |
|
Integrations Manager |
Employees in Client organization, responsible for providing credentials corresponding to different technologies that enable automated evidence collection. |