IT Compliance Management Flashcards

IT compliance management is the discipline of making sure an organization's information systems, data handling, and technology operations meet the obligations that apply to it. Those obligations come from several sources: laws and regulations, contracts with customers and partners, industry standards, and the organization's own internal policies. This topic covers the core vocabulary, the major regulatory and control frameworks, how risk is assessed and turned into policy, and how controls are tested, evidenced, and monitored over time.

Study this material by working through each group in order, since later ideas such as audit evidence depend on earlier ones such as scope and control objectives. Try to explain each answer in your own words before reading it, and connect every control to the risk it reduces. Pay attention to the difference between a requirement, which states what must be achieved, and a control, which is the specific measure used to achieve it. Reviewing the cards in short sessions over several days will help the terms stick, and writing a brief example for each concept, drawn from a system you know, will make the ideas practical.