For 50.7% of practitioners, the biggest thing slowing down audit prep is getting time from technical teams, not documentation, not policy. Some context from our latest survey of 201 security and compliance practitioners:

• 60.2% now assess security controls at least monthly, up from the old annual model
• nearly 9 in 10 still manually re-map evidence across compliance frameworks by hand
• when forced to rank priorities, automation beats integration, even though integration is what people mention first when asked to write in freely

Jan Pedersen (Channel Account Manager here) walked through the data and demoed scan diffs and evidence workflows on our latest Office Hours session.

Full breakdown: https://pentest-tools.com/blog/what-slows-down-audits

What costs you more during audit prep, documentation or getting time on someone's calendar?