From Periodic Audit to Continuous Assurance

I have been writing about the limitations of audits and compliance systems for several years. In Accountability and Transparency in Modern Systems, I wrote about systems producing evidence continuously rather than assembling it periodically for an auditor. In First Principles for Root Store Management, I looked back at the decision to require WebTrust for publicly […]