Continuous Evidence Collection

Gather proof that controls operate, automatically where the systems allow, so audit is a review rather than a scramble.