Your glossary for risk and compliance
Helpful definitions of all of the terms you need to know to better manage risk and compliance.
Trusted by the world’s leading organisations
TermsAFSL Authorised Representative AICPA Annex A Controls ASIC Attestation of Compliance (AOC) Business Continuity Management Compliance Automation Software Compliance Risk Management Cybersecurity Maturity Model Certification (CMMC) FedRAMP Governance Risk & Compliance (GRC) GPDR HIPAA HITRUST Incident Management Information Security Management System (ISMS) ISMS Governing Body ISO 27001 Notifiable Data Breach OAIC Policy Management SOC 1 SOC 2 SOC 3 SOC Reports SOC Trust Services Criteria (TSC) SSAE 16 SSAE 18 Third Party Risk Management Vendor Assessment Vendor Management Policy Vendor Review Vulnerability Vulnerability Management
What is a Notifiable Data Breach?
Under the Australian Notifiable Data Breaches (NDB) scheme by the OAIC, an organisation or agency must notify an individual and OAIC when a data breach involving personal information is likely to cause serious harm.
Examples of serious harm include:
- identity theft, which can affect your finances and credit report
- financial loss through fraud
- a likely risk of physical harm
- serious psychological harm
- serious harm to an individual’s reputation