The Delve Scandal Proved What Assessors Already Knew23 March 2026·1872 words·9 minsCompliance and GRC Compliance Automation Third-Party Risk Audit Readiness PCI DSSTwo weeks after writing about the structural problems with compliance platforms, the allegations landed. What assessors already knew.
Beyond the Dashboard: What SaaS Compliance Tools Can and Can't Do for PCI-DSS8 March 2026·1414 words·7 minsCompliance and GRC Compliance Automation PCI DSS Third-Party Risk Audit ReadinessA reality check on compliance automation platforms, the gap between generated evidence and assessed controls, and the questions to ask.