Compliance matrix: A document or tool that maps out an organization’s compliance obligations and how they are being met.