The problem is no longer the lack of policies or audits  One of the main concerns for organisations used to be failing to comply with regulatory requirements. Failing audits, lacking documented policies, or not meeting the expectations of customers and regulators was seen as…