Compliance teams have gone continuous, but their evidence-gathering hasn’t caught up

A survey of 201 security and compliance practitioners, commissioned by Pentest-Tools.com, finds that most organisations now assess security controls monthly or continuously rather than annually, but evidence collection and mapping across frameworks remains largely manual. Bottlenecks stem from operational and technical constraints, not policy gaps, and most control failures are caught internally rather than during audits. Practitioners say they want continuous automated evidence generation over more tool integrations.

Source: https://www.itsecurityguru.org/2026/09/04/compliance-teams-have-gone-continuous-but-their-evidence-gathering-hasnt-caught-up. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.