Cybersecurity and GRC terminology: English to Mexican Spanish
Use this guide when translating cybersecurity, privacy, audit, and GRC content for professionals in Mexico. It describes professional usage, not word-for-word equivalence.
Edition 2026.3. The companion guide, Spanish to English, lives on the Spanish version of this page. If something here is not how you would say it, tell us.
Legal note: Legal terms are date-sensitive, and this guide is not legal advice. Verify the current official instrument, authority, and procedure before relying on a legal translation.
How to use this guide
The default register is formal Mexican professional writing: security policies, audit reports, regulatory material, technical documentation, and professional training. Team chat, job titles, product names, commands, and quoted interface text may retain more English.
- Translate: Mexican professional writing normally uses the Spanish term.
- Keep in English: The English borrowing is the normal specialist term in Mexico.
- Context-dependent: The correct form changes with technical sense, register, organization, or jurisdiction.
- Official name or acronym: Preserve the official name, designation, or working acronym.
- Legal term, date-sensitive: Use the wording of the governing instrument and verify the current official text.
Consistency applies to the same sense, register, jurisdiction, and grammatical use. It does not require different concepts to share one translation.
Terms
framework; frameworks
→framework; frameworks; marco de referenciaKeep in EnglishGovernance, software, and official titles
Keep the noun in English, masculine, with the English plural: el framework, los frameworks. In compounds the noun stays English: framework de seguridad, framework de cumplimiento, framework de controles, framework de gestión de riesgos, framework de ciberseguridad. Preserve official names such as NIST Cybersecurity Framework unless an authoritative translated title applies. A legal or regulatory framework is a different concept and stays marco regulatorio or marco normativo. Also correct in formal writing: marco de referencia, then marco. Prefer framework, and use one term for the same thing throughout a text.
Example: The organization adopted a risk framework. → La organización adoptó un framework de gestión de riesgos.
That is not how I would say it
regulatory framework
→marco regulatorio; marco normativoContext-dependentLegal, regulatory, and GRC writing
Use marco regulatorio or marco normativo when the source means the broader body of governing laws, regulations, rules, and standards. Do not reduce the concept to a single reglamento.
Evidence basis: Professional usage judgment; no legal force is claimed.