Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is a security questionnaire?

A security questionnaire is a tool that an enterprise may circulate to service organizations to evaluate and validate an organization’s security practices before choosing to do business with that organization. Each enterprise seeking information about a company’s security practices may develop its own security questionnaire.

Obtaining a SOC 2 audit and report can offer a service organization the opportunity to get out ahead of lengthy customized security questionnaires answered on a customer-by-customer basis, by producing a single standardized assessment and documentation of the organization’s verified security practices.

Additional resources you might like:

Compliance
Events
Live Demo: Automating Compliance for SOC 2, ISO 27001, HIPAA, and More

Discover how Vanta’s automation and AI tools can help your team simplify compliance, strengthen security, and scale trust across frameworks like SOC 2, ISO 27001, HIPAA, and more.

AWS
Events
Turn security into your startup’s secret sales weapon

In this joint session with AWS, Vanta, and BreachRx, you’ll learn how early-stage teams are turning that pressure into an advantage.

Compliance
Events
Inside the FedRAMP 20x Pilot: Lessons Learned with Vanta

Join Vanta’s GRC team for an inside look at our journey submitting the first FedRAMP 20x pilot submission - a new initiative that fast-tracks the path to FedRAMP Low authorization without the need for an agency sponsor.

Additional resources you might like:

Compliance
Events
Live Demo: Automating Compliance for SOC 2, ISO 27001, HIPAA, and More

Discover how Vanta’s automation and AI tools can help your team simplify compliance, strengthen security, and scale trust across frameworks like SOC 2, ISO 27001, HIPAA, and more.

AWS
Events
Turn security into your startup’s secret sales weapon

In this joint session with AWS, Vanta, and BreachRx, you’ll learn how early-stage teams are turning that pressure into an advantage.

Compliance
Events
Inside the FedRAMP 20x Pilot: Lessons Learned with Vanta

Join Vanta’s GRC team for an inside look at our journey submitting the first FedRAMP 20x pilot submission - a new initiative that fast-tracks the path to FedRAMP Low authorization without the need for an agency sponsor.

Product updates
Blog
Introducing the all-new Vanta AI Agent to supercharge GRC teams

The Vanta AI Agent guides you through key compliance workflows and takes action on your behalf.

NIS 2
Events
Simplify Your Path to NIS 2 Compliance

Join us to explore Vanta’s NIS 2 solution, which automates up to 65% of compliance tasks through pre-built controls, templates, and cross-framework integrations—all with continuous monitoring for complete visibility over your security posture.

HIPAA
Blog
SOC 2 vs. HIPAA: Everything you need to know

How to tackle both certifications with ongoing security monitoring

Compliance
Blog
The buyer’s guide to automated compliance for startups

We put together this buyer’s guide to help you understand what to look for in automated compliance tools and avoid the compliance debt that slows so many companies down.

HIPAA
Blog
5 practical tips to navigate AI, security, and compliance in healthcare

Healthcare companies must balance AI innovation with risk mitigation to provide the best solutions and care without introducing additional risk.

Company news
Events
Founder to Founder: The Guide to Building a Breakout Startup in the AI Age

Join Christina Cacioppo (CEO and Co-founder of Vanta) and Mario Gabriele (CEO and Founder of The Generalist) for a tactical conversation on what it really takes to build a breakout startup, with sharp insights and strategies for staying ahead in a market that’s shifting faster than ever.