Skip to main content
Compliance

The Devensa Blog

Practical writing on security, AI, risk, compliance, privacy, and data.

Obligation map linking three obligations to control owners. One has a named owner and two are unassigned.

Compliance

Who Owns This Requirement?

Nearly 4 in 10 organizations have lost revenue or a bid over missing compliance evidence. See why tracking a requirement isn't the same as owning it.

Compliance checklist of seven ticked boxes. One of them was never actually run.

Compliance

Five Controls That Always Pass Review and Always Fail in Practice

A control can pass a SOC 2 exam for years and still fail the moment it matters. See the five controls that consistently pass review and fail in practice.