Compliance teams have gone continuous, but their evidence-gathering hasn’t caught up
A Pentest-Tools.com survey of 201 practitioners finds continuous compliance is now standard practice, but evidence-gathering automation lags far behind — a gap that undermines audit readiness under NIS2 and DORA.
Summary written by editorial AI · Source link below
The perception that compliance is a once-a-year scramble is out of date, according to a new survey of 201 security and compliance practitioners published by Pentest-Tools.com. The research finds that continuous compliance has effectively already arrived inside most organisations, but the automation needed to support it has not. The study, carried out in July 2026 […] The post Compliance teams have gone continuous, but their evidence-gathering hasn’t caught up appeared first on IT Security Guru .
Editorial Analysis
Organisations that adopted continuous compliance without automating evidence collection face growing audit-preparation costs and regulatory risk as NIS2 and DORA enforcement intensifies.
Benchmark your evidence-collection automation maturity and prioritise tooling that maps collected artefacts directly to NIS2/DORA control requirements.
Most organisations now monitor compliance continuously but still gather audit evidence manually — a mismatch that increases regulatory exposure.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at IT Security Guru in a new tab.
More from the Compliance Desk
- Medical services company settles with 4 states over 2023 hack of sensitive patient records3d
- 3 Frameworks to Protect CISOs & Orgs Against AI Liability27 Oct
- Developing Security Metrics for Automated Compliance Checking26 Oct
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads24 Oct
- 23andMe successor settles with California for $6 million over cybersecurity failings20 Oct