About Auditen
A working reference for audit, risk and compliance — plain-English guides to the standards, a glossary of the vocabulary, and a newsdesk tracking regulatory change.
What this site is for
Compliance work is full of terms that are used precisely by practitioners and loosely by everyone else. Auditen exists to close that gap: to explain what a standard actually requires, what a term actually means in an engagement, and how the frameworks overlap so the same control can be implemented once and counted several times.
Three things sit here. The framework hub covers the major standards — SOC 1, SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR and others — control by control. The glossary defines the working vocabulary of audit and assurance, with worked examples. The newsdesk follows regulatory and enforcement developments as they are published.
Where the information comes from
Everything here is built from primary, public sources: the published text of the standards themselves, regulator guidance, and the enforcement and rulemaking notices issued by supervisory authorities. Framework content follows the criteria as published by the body that owns them. Where a topic is contested or a standard is ambiguous, the page says so rather than inventing certainty.
What this site is not
Auditen is a reference, not an advisor. Nothing here is legal, audit or compliance advice, and reading it creates no professional relationship. Only a licensed firm can perform an audit or issue an opinion, and only your own counsel can tell you how a regulation applies to your organisation. Standards are also revised: always check the current published text before relying on any summary, including this one.
Auditen is independent. It is not affiliated with, endorsed by or accredited by the AICPA, ISO, the PCI Security Standards Council, the Information Commissioner's Office, or any other standards body or regulator named on this site. Framework and standard names are the trademarks of their respective owners and are used here for identification only.
Corrections
Accuracy matters more here than volume. If something on this site is wrong, out of date, or misrepresents a standard, please tell us — corrections are made promptly and without argument.