165 resources
TPDD & Compliance Glossary
Definitions covering third-party due diligence, vendor risk management, compliance frameworks, and GRC terminology.
A
- What is a Business Associate Agreement
- What is a Controls Assessment
- What is a Data Breach Notification Clause
- What is a Data Processing Agreement
- What is a Data Transfer Agreement
- What is a Due Diligence Questionnaire (DDQ)
- What is a Gap Analysis
- What is a Master Services Agreement
- What is a Maturity Model
- What is a Non Disclosure Agreement
- What is a Risk Assessment Methodology
- What is a Risk Matrix
- What is a Security Questionnaire
- What is a Service Level Agreement
- What is a Termination for Cause Clause
- What is a Three Lines of Defense Model
- What is a Vendor Assessment Framework
- What is a Vendor Risk Profile
- What is a Vendor Risk Register
- What is a Vendor Scorecard
- What is Access Control Review
- What is AI Governance
- What is AI Model Risk Management
- What is AI Vendor Risk
- What is an Audit Trail
- What is Anti Money Laundering Compliance
- What is Attestation
B
C
- What is CCPA Compliance
- What is CIS Controls
- What is Climate Risk in Vendor Management
- What is Cloud Security Posture Management
- What is CMMC Certification
- What is COBIT Framework
- What is Compliance Automation
- What is Compliance Monitoring
- What is Compliance Risk
- What is Continuous Controls Monitoring
- What is Continuous Monitoring
- What is Control Effectiveness
- What is Control Mapping
- What is Control Testing
- What is Counterparty Risk
- What is Credit Risk in Vendor Management
- What is Critical Vendor Designation
- What is Cross Border Data Transfer
- What is Cyber Risk Quantification
- What is Cybersecurity Insurance
D
E
F
G
H
I
K
L
M
N
O
P
R
- What is Real Time Risk Monitoring
- What is Regulatory Change Management
- What is Regulatory Reporting
- What is Regulatory Risk
- What is Remediation Tracking
- What is Reputational Risk
- What is Residual Risk
- What is Right to Audit Clause
- What is Risk Acceptance
- What is Risk Appetite
- What is Risk Avoidance
- What is Risk Heat Map
- What is Risk Mitigation
- What is Risk Quantification
- What is Risk Scoring
- What is Risk Tiering
- What is Risk Transfer
S
- What is Sanctions Screening
- What is Security Operations Center (SOC)
- What is Security Ratings
- What is Shared Assessments SIG
- What is SIEM (Security Information and Event Management)
- What is SOC 1 Report
- What is SOC 2 Type II
- What is Software Bill of Materials (SBOM)
- What is SOX Compliance
- What is Standard Contractual Clauses
- What is Strategic Risk
- What is Subcontractor Risk
- What is Supplier Due Diligence
- What is Supply Chain Risk Management
- What is Systemic Risk
T
- TPRM vs Vendor Risk Management: Scope, Risk Domains, and When Each Applies
- What is Technology Risk
- What is the Daydream Compliance Coverage Map (CCM)
- What is the Daydream Risk Score (DRS)
- What is the Daydream Vendor Trust Index (VTI)
- What is the TPDD Maturity Model
- What is Third Party Due Diligence
- What is Third Party Governance
- What is Third Party Risk Assessment
- What is Third Party Risk Management Program
- What is Threat Intelligence
- What is TPRM (Third Party Risk Management)
V
- What is Vendor Audit
- What is Vendor Benchmarking
- What is Vendor Compliance
- What is Vendor Concentration Risk
- What is Vendor Consolidation
- What is Vendor Due Diligence
- What is Vendor Due Diligence Checklist
- What is Vendor Exit Strategy
- What is Vendor Information Security Management
- What is Vendor Lifecycle Management
- What is Vendor Offboarding
- What is Vendor Onboarding
- What is Vendor Performance Management
- What is Vendor Risk Appetite
- What is Vendor Risk Classification
- What is Vendor Risk Dashboard
- What is Vendor Risk Intelligence
- What is Vendor Risk Management
- What is Vendor Risk Remediation
- What is Vendor Risk Reporting
- What is Vendor Risk Tolerance
- What is Vendor Security Assessment
- What is Vulnerability Management
Z
Put this knowledge to work
Daydream operationalizes compliance concepts into automated vendor risk workflows.
See the Platform