Platform Pricing GRC Hub

Sign in Start now

GRC Hub/GRC Glossary

GRC Glossary

Technical and regulatory definitions across GRC standards

All types A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Validation Review

Review aimed at confirming that closing evidence is sufficient.

Vendor Assessment

Analysis of risks, controls, and compliance of third parties the organization works with.

Vendor Due Diligence

Review of vendor background and controls before engaging them.

Vendor Management

Oversight of third-party relationships to ensure performance, control, and compliance.

Vendor Risk

Risk associated with dependence on critical vendors.

Vendor Risk Management (VRM)

Management of risks specific to the organization’s vendors.

Verification

Activity to confirm that controls, data, or processes meet requirements.

Voluntary Requirement

Definition or standard adopted by the organization by choice.

Vulnerability

A vulnerability is a weakness or condition that can be exploited by a threat to cause harm, loss, or noncompliance. In GRC, identifying vulnerabilities helps strengthen control posture.

Vulnerability Assessment

Analysis of systems to find flaws and weaknesses that attackers can exploit.

Vulnerability Management

Cycle of identifying, assessing, and mitigating weaknesses in systems and applications.

Vulnerability Prioritization

Ranking of vulnerabilities by risk, impact, and exploitability.

Vulnerability Remediation

Actions taken to fix or mitigate identified vulnerabilities.

Vulnerability Scanning

Use of automated tools to detect vulnerabilities in IT assets.