A significant gap remains between point-in-time compliance and continuous oversight ...