The FREE Cybersecurity Glossary by Thor Pedersen!

Compliance Documents: Official documents that evidence an organization's adherence to regulatory standards, laws, and internal policies. They can include policy manuals, procedural guidelines, audit results, training records, and other records demonstrating regulatory compliance. These documents are often essential in audits or investigations to demonstrate that an organization has met its compliance obligations.

Compliance Testing or Compliance Checking: The process of verifying whether systems, processes, and practices conform to established regulations, standards, and policies. Compliance testing is critical for ensuring that organizations meet legal requirements and industry standards, which can include data protection laws and security frameworks.

Component: In the context of system architecture, a component is an individual part that performs a specific function within the larger system. It can refer to hardware elements (like a CPU or a hard drive), software elements (like a module or function), or sub-systems. Components typically interact with other elements within the system and are designed to be interchangeable or replaceable, promoting flexibility and scalability.

Comprehensive Audit: A comprehensive audit is an in-depth review and examination of all aspects of an organization's operations, systems, and processes to ensure adherence to regulations, policies, and standards. It aims to verify compliance, evaluate risk management effectiveness, and identify areas for improvement.

Compression Viruses: A type of malware that compresses executable files and embeds itself within them. When an infected file is executed, the virus activates and decompresses the original file to conceal its presence, making detection challenging as they often resemble standard compressed files to users and antivirus programs.

Compromise: In the realm of information security, a compromise refers to a situation where unauthorized access is gained to a system or data, violating the confidentiality, integrity, or availability of the information. This could be due to an external attack, insider threat, or inadvertent actions. The consequences can range from information leakage and system malfunction to financial loss and reputation damage.