51% of firms identified data discovery as a top priority for improving audit readiness and control visibility.

45% of firms in the financial services sector prioritize automated evidence collection and document management for enhancing audit readiness and control visibility.

18% of organizations perform security audits to assess the effectiveness of their API security measures.

14% of organisations failed multiple compliance audits due to identity-related issues.

34% of organisations have failed a compliance audit due to identity-related issues.

17.7% of teams at financial organizations report spending 25+ hours monthly on gathering data for audits and access reviews.

0.3% of financial organizations surveyed admitted to having failed an audit in the past year.

Only 4.8% of teams at financial organizations spend fewer than five hours on gathering data for audits and access reviews.

88.4% of financial organizations surveyed are "very confident" in passing a surprise compliance audit.

Only 0.2% of financial organizations surveyed reported lacking confidence in passing a surprise compliance audit.

49.3% of teams at financial organizations spend 10–25 hours monthly preparing audit data.

62% say their audit evidence-gathering process is at least occasionally error-prone.

On average, just 39% of the audit evidence process is automated.

92% of respondents rely on three or more tools to gather audit evidence.

Nearly half of financial institutions cite auditors and regulators as primary drivers for enhancing TPRM programs.

54% of privacy professionals interact with internal audit.

33.5% of CISOs cited audit management as a challenge in implementing new or updated compliance frameworks.

More than one-third (37.2% of CISOs) said that no platform has demonstrated its reliability for Compliance as Code.

66.7% of education businesses are challenged by audit readiness and their maturing compliance program.

33.5% of CISOs are challenged by audit readiness in satisfying regulatory requirements.