Audit preparation was a project rather than a state. Ahead of each cycle, teams across five SAP instances pulled evidence by hand, reconciled it in spreadsheets and reconstructed approval histories from email. The work took eight weeks and produced a snapshot that was already out of date by the time it was reviewed.
In a regulated industry that snapshot approach is expensive twice over: once in effort, and once in the exposure that sits in the gap between two audits.