Today
Frameworks, spreadsheets, policies and documents sit in separate systems.
A change in law triggers broad manual review because impact is hard to localise.
Audit readiness is reconstructed periodically instead of being maintained as an operating state.

