GRC Oversight
Glossary

Test

An automated or manual check that produces a pass/fail result against a requirement.

A test is the mechanism that actually verifies a requirement is being met, for example an automated check against a cloud provider's API that confirms MFA is enforced, or a manual attestation that a policy was reviewed. Tests run on a schedule for continuous monitoring, and each result becomes evidence.

Looking for another term or the full list?