admin

For years, compliance operated on a relatively simple model. An organisation prepared for an audit. Evidence was collected. Policies were reviewed. Controls were sampled. Certifications were issued. The business moved on until the next assessment cycle arrived. That approach worked reasonably well in a slower and more static technology landscape. Read more…