Video: Evidence Collection with the Compliance App

by

For compliance purposes, whether going through an external audit or for an internal initiative, it will be required to demonstrate to auditors or other stakeholders that compliance frameworks and controls are operating effectively by providing evidence of the control's operating effectiveness.

The benefit of using JupiterOne Compliance App for evidence collection is that once the queries are configured, JupiterOne will provide near real-time continuous monitoring of compliance. J1 will automate the evidence collection and output for external audit purposes. 

 

 

Other Resources:

George Tang
George Tang

I possess extensive senior information security leadership experience from serving hundreds of clients by assessing, designing, and implementing security + enterprise risk management programs. I assess + advise companies (from Fortune 5 to pre-seed startups) on their businesses', products', and environments’ security architectures. Additionally, I own a rare blend of technical subject matter expertise within the cloud technology space across the major hyperscale cloud service providers, i.e., AWS, Azure, GCP, specifically within the infrastructure security domain. Background: information security, cloud security, cyber security, governance/risk/compliance, assessments + advisory, risk management/risk assessment.

Keep Reading

The AI Act Slowed Down. Your AI Didn't | JupiterOne
June 8, 2026
Blog
The AI Act Slowed Down. Your AI Didn't

The EU AI Act's high-risk deadlines moved to 2027 — but AI keeps shipping. Why the delay is a window, not a reprieve, for security and risk leaders.

What Is Continuous Controls Monitoring? | JupiterOne
June 2, 2026
Blog
The Compliance Industry Automated the Wrong Thing

Evidence collection got faster. Control effectiveness stayed invisible. Continuous controls monitoring fixes the actual problem.

DORA Is a Graph Problem. Most Firms Are Trying to Solve It With a List | JupiterOne
May 29, 2026
Blog
DORA Is a Graph Problem. Most Firms Are Trying to Solve It With a List

DORA demands continuous visibility and dependency mapping that GRC tools, CMDBs, and spreadsheets can't deliver. See why a graph-native approach works.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.