Cyversity Engage | A Step Towards Continuous Trust with Continuous Audit Metrics

Compliance is an expression of Trust. Continuous trust has been a holy grail for many. This is only possible through automation, with dedicated tools continuously measuring specific characteristics of an information system and comparing the measurement results with predefined compliance objectives. In other words, continuous assurance requires the use of metrics. In that context, the release of version 1.0 of the Continuous Audit Metrics Catalog is an important milestone. However, plenty of work is still needed to provide the industry with a mature cloud metrics framework. We will discuss the steps that security GRC professionals can take towards an agile and inclusive continuous security assurance.