nis2
NIS2
The EU directive that strengthens requirements for cybersecurity, management accountability and incident reporting.
Compliance evidence · TSP-verified certificates
Compliance glossary
Terms leadership must understand
A concise glossary for boards, leaders, auditors and security owners who need a shared language for requirements, risk and documentation.
Terms
dora
DORA
EU regulation for digital operational resilience in the financial sector.
csrd
CSRD
EU sustainability reporting requirements with much more structured and audit-ready documentation.
esg
ESG
Umbrella term for environmental, social and governance factors.
gdpr
GDPR
The EU privacy regulation for processing personal data.
sbom
SBOM
Software Bill of Materials: an inventory of software components.
soa
SoA
Statement of Applicability: overview of which controls apply and why.
rto
RTO
Recovery Time Objective: how quickly a service must be restored after disruption.
rpo
RPO
Recovery Point Objective: how much data loss the organisation can tolerate during recovery.
tsp
TSP
Trust Standard Protocol: an open protocol for verifiable AI evidence.
trustenvelope
TrustEnvelope
The envelope that seals one AI event with a signature, hash and chain link.
trustmanifest
TrustManifest
The issuer's published key overview used for verification.
trustbadge
TrustBadge
The visible badge linking to verifiable TSP evidence.
ed25519
Ed25519
The signature algorithm (EdDSA) TSP uses to sign evidence.
hashchain
Hash chain
The chaining that exposes insertion, deletion or modification in the evidence log.
jcs
Canonical JSON (JCS)
Standardised JSON form (RFC 8785) that yields reproducible hashes.
qtsp
QTSP / eIDAS
Qualified Trust Service Provider under the EU eIDAS regulation.
evidenceintegrity
Evidence integrity
What TSP actually verifies: that the evidence is unchanged, complete and correctly signed.
reservedstate
Reserved state
TSP states that can never be self-issued: anchored, qualified-timestamped and registered.