§ 07.1
Automated today, by most tools
- Evidence collection integrations screenshot it
- Control status checks APIs test it
- Policy boilerplate templates start it
Genuinely useful, and table stakes. But all of it assumes somebody already knows what the rules currently require.