Skip to main content
Blaise

Glossary

Plain-English terms for executive assurance.

A shared vocabulary for MSPs, vCIOs, vCISOs, GRC teams, auditors, and stakeholders talking about controls, evidence, risk, and readiness.

Resources

Run a better program

Playbooks for advisory leaders

Guide

The 6-step operating loop

Read

Template

Board-ready QBR structure

Use

Field note

Answer once, prove many

New
100+ frameworks cross-mapped
18+ live integrations
Governed AI
Operated by Sekuir Technologies, LLC

Defined term

SCF crosswalk

A common-control spine that maps many framework requirements to shared controls so one answer or evidence item can support overlapping obligations where mappings apply.

Defined term

Control

A safeguard, process, configuration, policy, or activity that reduces risk or helps satisfy a framework requirement.

Defined term

Evidence

Proof that a control is designed, operating, or reviewed. Evidence can come from live connectors, documents, attestations, policies, reports, or operator review.

Defined term

POA&M

Plan of Action and Milestones: the tracked remediation plan for a gap, including owner, due date, status, and the work needed to reach the target state.

Defined term

Readiness

The practical state of being prepared for an audit, customer review, insurance request, or executive assurance discussion. Blaise prepares and evidences readiness; it does not certify.

Defined term

vCISO

A virtual or fractional CISO function that provides security leadership, risk governance, control oversight, incident readiness, and board-level security reporting.

Defined term

vCIO

A virtual or fractional CIO function that leads technology strategy, roadmap, budget, lifecycle, vendor, and stakeholder engagement work.

Defined term

TPRM

Third-party risk management: the process of assessing, governing, and monitoring vendor and supplier risk, including questionnaires, evidence, renewals, exceptions, and executive reporting.

Defined term

Attestation

A statement by an owner, vendor, or stakeholder that a condition is true or a control activity occurred. Attestations are useful, but stronger when linked to evidence.

Defined term

Continuous compliance

A compliance operating model where control status and evidence freshness update between audits from live signals, documents, owners, and remediation work.

Defined term

Evidence freshness

How current evidence is for the control it supports. Stale evidence can reduce confidence even if the control was previously marked ready.

Defined term

Governed remediation

Remediation run under guardrails such as off, approval-first, dry-run, auto for low-risk actions, risk ceilings, and an execution ledger.

Build the stakeholder story before the meeting starts.

See how Blaise turns posture, risk, evidence, vendors, roadmap, and decisions into a board-ready operating rhythm.