Source: https://atomic-works-test.docs-staging.pageloop.ai/monitors/glossary

# Glossary

# Glossary

This glossary explains key terms used in Sprinto’s **Monitors** section. It includes technical concepts, compliance-related actions, and terminology specific to Sprinto workflows.

TermDefinitionMonitorA compliance check that validates a control, either automatically or manually.Workflow CheckA manual compliance control that requires human verification or evidence upload.FailingThe monitor is not compliant with the control’s expected configuration or policy.PassingThe monitor is compliant with the expected control and requires no action.Pending EvidenceThe monitor requires uploaded documentation to confirm compliance.Not in ScopeA user or asset has been marked as out of the control’s applicability.Mark as ResolvedThe action used to manually confirm that a failing monitor has been addressed.Dr. SprintoA device-level agent used to monitor endpoint compliance (e.g., screen lock, OS updates).DecisioningThe process of marking users or resources as in-scope or excluded from checks.Employee PortalA user-facing interface for completing tasks like device health reports or confirming compliance actions.Evidence UploadThe process of submitting screenshots, documents, or exports to prove compliance.Root UserA superuser account on platforms like AWS or GitHub that requires strict controls (e.g., MFA).Critical SystemA system with access to sensitive data or infrastructure, subject to stricter controls.Point-in-Time Recovery (PITR)A backup method that allows restoring data to a specific time in the past.Access ReviewA review of user permissions to ensure access is aligned with roles and responsibilities.Screen Lock EnforcementA system policy requiring automatic screen lock after a period of inactivity.Branch Protection RuleA source control rule that prevents direct changes to production branches without review\.Dependabot AlertsGitHub-native security alerts about vulnerabilities in software dependencies.Encryption Key ManagementThe process of securely creating, storing, and rotating cryptographic keys.CloudTrailAWS’s audit logging service that tracks account activity and API usage.Flow LogsLogs of network traffic for cloud services like AWS VPC, Azure NSG, or GCP VPC.Registry PolicyA Windows system setting defined through the registry to enforce security policies.gpupdateA Windows command that forces group policy refresh, often used to apply security changes.Service AccountA non-human account used for automation or application access; often excluded from user-level controls.Evidence TrailThe collection of artefacts and logs that demonstrate how controls were implemented.Change ManagementA formal process to track, approve, and log changes to systems or processes.Disaster Recovery (DR)A documented strategy and set of actions to restore systems and data after an outage.