Report by Thoropass
State of Audit and Compliance
Key Findings
91% of security, IT, and compliance professionals must resubmit audit evidence at least sometimes due to miscommunication or shifting auditor expectations.
53% of security, IT, and compliance professionals cite collecting evidence across multiple tools as the most common bottleneck in the audit process.
69% of security, IT, and compliance professionals state that adoption of AI tools in their organization is outpacing existing security and compliance controls.
57% of security, IT, and compliance professionals believe AI-related incidents are most likely to trigger regulatory action or customer fallout in 2026.
Only 18% of security, IT, and compliance professionals are not concerned about AI-related compliance risk.
55% of security, IT, and compliance professionals say AI-related data exposure or misuse is their top breach concern, exceeding concerns about ransomware, IAM failures, or cloud misconfigurations.