Continuous controls monitoring

A Manulife GRC executive argues control assessments describe an environment that has already changed

A governance, risk and compliance executive at Manulife argues that assessments taken at intervals cannot describe systems that change between them. The evidence he offers is his own experience with enterprise projects and one cited research paper.