In 2002, many enterprises invested in first-generation ERP GRC software, following SOX’s lead of focusing on SOD controls. That was then. Today, as other IT areas present risks, enterprises are evolving from point-in-time reporting to Continuous Controls Monitoring (CCM) for IT audits. Here is a CCM solution that helps answer today’s top auditor questions to ensure ongoing SOX compliance.