Source: https://sprinto-test.docs-staging.pageloop.ai/policies/glossary

# Glossary

This glossary defines key terms used across the Policies module in Sprinto.

| Term                 | Definition                                                                                             |
| -------------------- | ------------------------------------------------------------------------------------------------------ |
| **Policy**           | A formal rule or requirement that governs organisational behaviour, security, or operations.           |
| **Procedure**        | A step-by-step guide that outlines how to implement a policy.                                          |
| **Document**         | A general artefact that supports compliance, such as audit reports, charters, or ISMS scope documents. |
| **Draft**            | The initial stage of a document. Drafts can be edited, reviewed, and submitted for approval.           |
| **Pending approval** | Indicates that a policy has been submitted for approval but is not yet active.                         |
| **Active**           | A policy that has been approved and is available to employees for acknowledgement.                     |
| **Disabled**         | A policy that has been deactivated and is no longer visible to employees.                              |
| **Reviewer**         | A user who can leave comments on a draft policy but cannot approve or edit it.                         |
| **Approver**         | A user authorised to approve a policy and move it to the active state.                                 |
| **Version**          | A tracked iteration of a policy, created when changes are made after activation.                       |
| **Control**          | A specific compliance requirement that a policy helps satisfy.                                         |
| **Control mapping**  | The process of linking a policy to one or more compliance controls for audit purposes.                 |
| **Sprinto template** | A prebuilt, editable policy document aligned with specific frameworks (e.g. SOC 2, ISO 27001).         |
| **Library**          | A repository of standard documents that can be added to your organisation’s policy set.                |
| **Acknowledgement**  | An employee’s confirmation that they have read and understood a given policy.                          |
| **Sync**             | The process of importing documents from Confluence or SharePoint into Sprinto.                         |
| **Monitoring**       | The dashboard used to track the health and compliance status of policies and tasks.                    |