I know I'm late to this thread, but hopefully this reply can serve some
others in the community.

I can share what I feel is a good methodology for selecting a compliance or
auditing tool. I would begin by first determining my entire compliance
landscape. By that I'm referring to both internal a...

[ more ]