Glossary
Plain-language definitions for SOC 2, ISO 27001, HIPAA, and general audit terminology.
Workflow approval is a recorded decision step where an authorized person reviews a request and approves or rejects it before the work moves forward, such as an access request or a production change.
A written information security program (WISP) is the documented set of policies, procedures, roles, and safeguards an organization uses to protect the information it holds, written down so people can follow, review, and show it.
