Name: The State of Compliance 2026: Insights from 1,000+ Professionals
Uploaded: 2026-02-24T20:16:06.468Z
Duration: 36 min 12 s
Description: The State of Compliance 2026: Insights from 1,000+ Professionals

Transcript for "The State of Compliance 2026: Insights from 1,000+ Professionals": Hello, everybody. We'll give everybody a second to join and then we'll get started. All right. We're seeing some folks filter in. So excited to have you guys join us today to talk about Align's 2026 compliance benchmark report. This is one of my very favorite topics to talk about year after year. It's a great way for us to get insights from the field and then compile them and share them with you all. So we launched this report about a month ago now. So if you haven't had a chance to read it, or even if you have, we're going to go through some of the key findings today. There's so much more in the report than we can cover in the next thirty minutes or so. But I think we'll have some really great insights and things that we can talk about. So to kick things off, as a quick introduction, I'm Elizabeth Stryker, the senior director of content and communications at Align. And so my role is putting together this report for you all every year. So my team puts together the survey of compliance professionals, and then we take all of those key insights, analyze them, and put them together in a beautiful report for all of you. So I'm here today to kind of represent the voice of the customer in terms of the key findings that we have. And then we have a real expert here who can talk about what these stats actually mean. So Stephanie, do want to do an introduction? Absolutely. Thanks, Elizabeth. My name is Stephanie Rankin. I am our EVP of attestation services, which is just a very long winded way of saying that I oversee many of the different product families that we deliver to our customers here at Align. I grew up in the soft practice and, spent a lot of time working through enterprise accounts, complex organizations, making sure that, our customers had very custom reports to deliver. And, this is a topic that's near and dear to my heart and a lot of something I spend a lot of time working on day in and day out with Elizabeth. Awesome. Alright. So a quick preview of the agenda that we'll go through today. So today, we're gonna focus on four key findings from the report. So we'll talk about audit quality, audit harmonization, tech enabled compliance, and strategic AI risk management. So lots of topics to cover here. So we will jump right in and share some key findings with you. So before we talk about what's in the report, I want to level set here about the methodology and how this report comes together. So when you're seeing these stats, have a sense of who we surveyed, who these people are. So we surveyed over 1,000 respondents. About 85% of them work for companies that are headquartered in The US, 15% of companies headquartered outside The US. And so the individual's geographic location may vary, but we had a good mix of global respondents here. You'll also see we have folks across a number of industries, software being very heavily focused on in this group, but many industries represented here, as well as the role of the person that we surveyed. So we have people from executive and c level down to managers. So we're getting a good variety of folks here at different stages in their career with maybe different responsibilities. And then companies of different sizes as well. So we have both broken down by number of employees and annual revenue. So whether you work for a small organization or one of the world's largest, we have representation in this group. One thing that I do want to note, today we're going to be talking about the top line findings. So this is, you know, for the entire group. But if you go to our landing page for the report, which we will, you know, we can drop that in the chat for you all, We do have an interactive feature where you're able to sort some of the data by industry and company size. So that's a great way for you to dive in if you wanna see something that's a little bit more comparable to your organization, your size, your industry. So a great way to kind of dive in and get a better benchmark of your peers. But today, we're just going to talk about the full group of over 1,000 respondents as a whole. So first, we're going to talk about audit quality. This is a topic that we focused on in last year's report. And so we wanted to follow-up with people and figure out, is quality really important? Do people care about the quality of their final report? And do people care about the quality of the audit experience that they have and the auditors that they work with? And so we've seen this as a growing theme over the past couple of years, and really, as you see here, had a pretty big jump between 2025 and 2026 in our findings. So we asked people, how important is the quality of your report? In 2025, 70% said it was extremely important, and this year, 80%. So we're continuing to see this trend of quality as being something that people in this industry are talking about, and they're paying attention to what's in their final report. We also asked about the difference in quality between auditors. And so in this case, we didn't necessarily define what quality means in this situation. But we asked, like, based on you know, many people have worked with different auditors throughout their career. Maybe they've made a switch here or there. Maybe they have different auditors for different services. But people you know, 83% of people surveyed say they noticed a difference in quality. So what this means is that there's a this is a differentiator and something that you should be thinking about as you're looking for an audit partner. So Stephanie, I would love to hear your perspective here about how often is quality coming up in conversations. And over the past couple of years, I think it's become more of a buzzword. And so what are you hearing from people, and how are you thinking about quality and what it means? Absolutely. So I think that there are kind of two categories of quality, if you will. What does the final product look like, the final report, the thing that you have in hand that you are giving to your customers that's indicating whether or not they should trust your organization. Right? And then the other part of it is the part that your our customers customers cannot necessarily see, but they are our customers are directly feeling this, and it's the audit quality experience. So how how does that audit go? Is it efficient? Is it, you know, respectful? Is it communicative? Is it based in technology? And so there's kind of two categories to your point that there there is, the essence of quality is talked about differently in the market. Of course, experience of what you're going to go through directly with your auditor should be of utmost importance because it's a very big time investment. It's it's very important to your organization to not spend additional hours and time on things that aren't necessarily contributing to a quality audit report at the end of the day. So, you know, one of the things that I think we take a lot of pride in here at Align is that we are very technology centric. We try to build our technology platform to ensure that our customers are seeing a very organized audit. They are you know, they have visibility into their audit. They have a very good way to communicate back and forth with their auditors and really to gauge where they're at as their audit is coming, passing, completing, and moving on into, you know, a compliance, planning period as well. So I think that that's a very important piece. Know, it's not only technology. There are some, you know, mega minds behind that technology that still coordinate with you very much. The auditors, the audit managers are having, you know, fruitful conversations with you as a customer. And one of the things that we take a lot of pride in as well is that we are very open. We have a very, you know, quick turnaround time to respond. We like to be very transparent. I say this every time we talk about this subject, but bad news does not age well, and we try to live live to that standard as well with our clients. You know, a lot of times, it's the scenario where we can sit and have a conversation and understand the risk to your organization better to to best understand how to apply, you know, the testing, the controls, and and how it fits into the grander scheme of the audit that you're being tested against. So I think that that's a really important piece is to have an auditor that is open to communication, is driving an audit, you know, with technology in mind, is, very communicative with you in a very timely manner so you're not wasting hours on your side. And then on the other side of it, the final report and what you really get to go show customers at the end of the day, you know, is the control tailored to your specific scope? Is it addressing those specific concerns or risks to your business so that whenever you are giving it to your customers, you can truly reflect, you should trust us. This is a symbol of trust, and that's what we are you know, at the end of the day, we're trying to have transparency between ourselves, our clients, our clients, and their clients as well because it is a flow down report. So, I think that all of those things are very, very important, and different things matter to different people. Right? Our customers' customers at the end maybe don't care as much about the experience. But if you are going through an audit yourselves as an organization, it is something that you probably should take some time to consider and, you know, understand what type of relationship you'll have with your provider. And is it very transaction based, or is it more of a partnership? So, sorry, Elizabeth. That was very, very long winded answer to, to your question, but I think it's important to really understand. both sides. I think so too. And I think this leads us really well into this next survey question where we ask people about the audit experience in the final report. Steph, I think what you pointed out here is quality means a lot of things to a lot of people, and there's a lot of elements that make up a quality experience and make up a quality final report. So it's not just, you know, is it printed on nice paper and do we feel great about the way that it looks at the end of the day? It's about what's inside and what makes up this experience. And so we ask people what what how do you define quality in the audit experience, and how do you define quality in the final report? And so with the audit experience, it's about working with auditors who have experience and understand your business. So that's a key piece of that stuff when you talked about making sure people are experienced. They've done this before. They can lead you through the process. Also, use of technology. So a huge piece of this puzzle in terms of helping to drive efficiencies through the process and make it, a more streamlined process for both the audit team and your team. And then experience with similar companies. And so you want to choose an audit partner who has worked with companies like yours. They know maybe the pitfalls that you might run into, and they can kind of help along that process. And then we've got the final report. So what does quality look like in the final report? It demonstrates that you're actually mitigating risk. It is relevant and customized to your business. I think that's a really big piece. That's really important that this is not just a checkbox. It's not a report that you could pull up and you're like, I don't even know what company this is for. It's really relevant and customized. And then, you know, ultimately, that makes a useful final report. And then also the depth and specificity of controls. So, again, not that surface level, but making sure that the team's actually spending time to dive in and be specific. Anything you'd wanna add here? No. I I think that those those are all great points. And, you know, at the end of the day, having a report that is of a high quality, that has depth, and demonstrates that you're mitigating risk likely leads to fewer questions when you are trying to obtain more business, you are trying to go through contractual processes or security questionnaires and things along that nature. So, the work that we put into this is hopefully felt, you know, on the back end after you walk away from your experience with Align, utilizing it going forward, for many different reasons. So, you know, I think I think it the time return on this, the the ROI on it, if you will, continues to give back to you over the course of time. And I think that's kind of an important piece to understand too and how quality directly impacts that ROI. Yeah. Exactly. It's about, you know, making sure that you, of course, have a a quality experience and, you know, have the best experience possible and enjoy it while you can. And then also having a final report that isn't gonna require rework, isn't gonna require additional security questionnaires so that you're getting what you pay for. And then, you know, you could have a final report that actually means something. Absolutely. So I think I think that's fantastic. So let's move on to our next theme, which is about audit harmonization and overcoming these barriers. So we talked to people about their annual audit frequency. And 97% of organizations that we surveyed are completing at least two audits a year. And enterprise organizations are doing even more. I think that something like 70% of enterprise organizations are doing four or more audits a year. So what we know is that there's a lot of pain that people are feeling in terms of ongoing audit cycles, having to manage maybe different audit providers, different standards, pulling evidence at different times of the year. Maybe your audits are not on cycle with one another, so that means you're doing some of the same work. And so but we also ask people about, like, what is the greatest challenge that you're facing? And a quarter of organizations say that managing multiple audits is their primary challenge. So, Steph, would love to hear your perspective here knowing that you're working with a lot of customers, maybe some that are only working with us for one service or others that are consolidating and, you know, kind of how this pain affects their day to day. Absolutely. So this is something that we can probably talk about in our sleep. I know every once in while, I'll have I'll have a one off dream about audit harmonization and and ways that we can problem solve, which probably says a lot about my social life. But, you know, I think that it is important to understand these are problems that are solvable problems that we handle day in and day out with multiple clients. So if you're feeling very burdened by this, pick up the phone. Let's have a conversation. There are solutions to feeling this burden of multiple audits being done, you know, simultaneously. Or if you have them broken up into different cycles and that is also becoming very painful, We can work with you to harmonize those and so that we are working specifically towards efficiency, consolidation, timing that makes sense for you, and maintaining your current cert or audit dates as well. So, you know, I think that it's it's, something that can feel very overstimulating to organizations, and it can take up a lot of a lot of time, a lot of brainpower to do that. We have a program, though, that we can run with you, and it's really initially understanding your business and understanding how your controls and your different audit pieces, whatever audits they may be. If we can do them, we can we can help you harmonize them and make that that burden a little less painful. So, you know, I think that it's interesting to see that a quarter of organizations are you know, they're managing concurrent audits, and it's a challenge because there are so many solutions, whether, you know, it'd be a combination of technology, process, timing, professional consultation. There's so many pieces that we can build into this so that you can really get the most bang for your buck in both evidence collection, your conversations with your auditor when you're going through interviews, we can make sure that we are gathering teams in the right place at the right time to have the most appropriate conversation with your key stakeholders. And that alone can save hours and hours of time. So I think that it's really interesting, you know, to think about the challenges that people are having and and the fact that there are solutions. It's it's a matter really of picking up the phone, starting the conversation, and seeing what contractual obligations you're working up against, what standards you're being audited against, and then really getting a game plan together with an audit professional to ensure that you are, you know, running your compliance program in a very efficient way. You can kind of think of it tax strategy, you know, to some degree because you you typically don't call your your tax accountant at the very last second to to do this. Call us. We can help you plan through this. You don't have to do this alone. We we dream about it. So you can call us, and we can work with you to make sure that we are creating sustainable solutions that really make sense for your business, your compliance team, whether that's a team of one or a team of many. There there are a lot of opportunities here for improvement. Yeah. And I think I think that makes a lot of sense because we ask people, you know, do you think that consolidating would save you time or money? And nearly everyone said, yeah. Of course, it would. Like, they absolutely everyone can agree. But what's interesting is that not everyone's doing this. And so one of the things we wanted to dive into this year is, like, what's preventing you from consolidating audits? What are the challenges that are in your way? And 24% of people said, we don't have time to do it. And 27% said, we aren't sure how to get started. And what I think was interesting, Stephanie, is that we were having this conversation. And you brought up the point where you said, well, you don't need to have the time. We have the time to help you. And you don't know how to get started? We know how to help you get started. I think that a lot of people look at this, and they're like, well, what can I do? And I wouldn't know I don't know the first place to start. But we do. We've done this for many clients many times. And so it's about, like, how you have that expert on your team who can say, actually, we figured this out for you. Not that it won't be, you know, without its challenges along the way, but, like, you they don't need to dream it up from from the beginning. We've already done that for them. Absolutely correct. You know, we spend a lot of time, whether it's cross training teams, making sure standards are aligned, working together to ensure that everyone is on the same page so that we can deliver a cohesive service. And that really is built around the concept that there are clients out there that are experiencing pain by having staggered audit periods, cert dates. They don't, you know, maybe have a great organizational system to understand where they can collect evidence one time and apply it to a set of entity level controls because that's also a challenge. You know, we understand that you may have all of your reports aligned completely with from a timing perspective. However, you are acquiring a new business. You're maybe you're selling off a part of your business. Maybe you're opening new locations. You're rolling out a new product. You're starting to process a new type of data that's, you know, therefore, opening a new standard, maybe health care data, and you you need to explore HIPAA or HITRUST. So all of those things can cause complicated factors to your audit program, and that's something that we can help you with. We spend a lot of time keeping everyone in our service delivery teams updated on all standards and updates across the board so that we can ensure that we're providing back, you know, guidance to our customers on how to create efficiencies and really have the most enjoyable audit experience they can have, because that we our hope is that it translates back also into their security program as well. You know? And they have a higher level of security because they are really running a high level compliance program also. Yeah. Absolutely. And I think, another thing is that we have different clients who, you know, go about consolidation in different ways. So sometimes it's that we're doing one service with them, and then they transfer additional services to us. And sometimes it's customers who've been working with us, like you said, who have many different services, and we're able to kind of help streamline them and the the timing and the cycles. So I think while, you know, audit harmonization can mean a lot of things, I think that there's always ways that we can improve the process, find efficiencies, whether, like Stephanie mentioned, whether you're using technology to do that or whether it's just cutting down on your meetings that you need to be in, how we can find efficiencies along the process. Certainly. Awesome. Alright. Now we kind of talked a little we've talked about technology, and so I wanna make sure we're spending some time to dive into the idea of tech enabled compliance. And so this is a really important part of again, we talked about this is a driver of quality. This is how people are thinking about what quality means. This is a way that you drive efficiencies in your business. And so we asked people, are you using technology during your audits and assessments? And 95% of people said yes. This is a big jump from what we've seen in previous years. And, Stephanie, you've been in this space for a long time. So I'd love to hear your perspective on how you've seen the importance of technology grow over time, you know, going from something that was a nice to have or something that could improve the process to now being absolute table stakes required for a good audit experience. Absolutely. It's certainly baseline now, and I can remember, you know, fifteen years ago, that was certainly not the case. Even five years ago, I don't think it was as relevant in the conversation. We've seen a huge advancement in technology in the audit space, and it it does make a huge difference to, you know, your your preparation, your audit execution, your comfort level around both of those things as well, your visibility, the transparency. You know, there there are so many pieces to technology that that are important to running a streamlined audit. And, you know, I think Ascend is a great example of that. You, as an as a client, you can understand, hey. Did I really hit the core essence of these of of these requests? You can quickly analyze those files very early on in your audit period without necessarily even talking to an auditor to ensure that you've put things in the right place. You you're covering all of the boxes. You know, I think that it also helps you really have an an option for scalability, as you are you know, to our previous point about harmonization, as you are adding on new standards, you have a control set in your organization, that's built on what risks are relevant to your organization. And every once in a while, whenever you obtain a new certification or, you know, an audit of some sort, there might be controls that you need to have that you don't feel are necessarily relevant. But those are typically, you know, minor steps in advancement. And so the technology can really help you understand where you stand today and where you're going tomorrow potentially with new standards, new audits. And I think that that's a really important piece too because, you know, that's something that takes a lot of research hours to have. I think that that's that's certainly, not something that a lot of professionals that are running a large compliance program, you know, have on their day to day docket for exploration. I know we spend a lot of time on that. Again, that's something that we can help you with. We've built our technology to help guide you in that as well. So I think that that's a that's a huge piece. And I've said this this part a couple of times too. You know, I think transparency during your audit process is a huge factor into your success. Not knowing where you stand on any form of an assessment is uncomfortable. You know, whether it's waiting on a on a test score back to obtain a new license or or certification or if it's going through an audit and you have a lot of stake, you know, a lot of a lot of, lot of skin in the game, I guess you could say. So, you know, I think that there there are so many pieces that technology helps advance, but it's really to your point, Elizabeth, it's become baseline. And, I think it's it's should be one of the top questions that you ask whenever you are exploring potentially a new a new audit provider is what is what tech are you using? What does it look like? What can it help me do as an organization, and does it keep me in the loop of my audit ultimately? Yeah. Absolutely. And then I think that another thing, Stephanie, that you mentioned earlier is that while technology is vital and table stakes and can make the process so much easier, I think it's also about understanding the people behind the technology as well. And the people plus the technology is, like, really where the sweet spot is. And I think that there are a lot of there's a lot of innovation in this space, which I think is fantastic. Right? There's a lot of things with automation and new platforms that are available to help make compliance easier. But sometimes, you know, a platform can't do it all. So how do you think, Stephanie, about, like, how our audit teams work hand in hand with Ascend and with technology and kind of, like, how that is the secret sauce? Absolutely. So I will start by saying Ascend is built internally, which should be maybe a more obvious statement, but that means that it is built with the brain, you know, brain power of an auditor in mind with how we are going to conduct your audit so that we are getting to the checkbox of what matters to the client, what helps us deliver a better service from a quality perspective. You know, how do we deliver the best service possible for you through this piece of technology? We don't have to fight anyone, on on what features should be relevant, how to best serve our clients. We get to design that. We take a lot of feedback from our customers as well. So, you know, I think that the technology itself is driven largely by our experiences with clients. But then on top of that, the day to day use of the technology is also it's being driven by our by our audit teams, our auditors, our audit managers, our senior managers, our partners. So I think that it's really important to understand both pieces of that. You know, the platform really sets you up to have visibility, quick response from your audit team without having to sift through your email inbox, create new Slack channels, things like that. You really get to see the line by line items and feedback from your audit team directly at any hour of the day that you want to see them. So I think that that's also an important part is understanding not only how the technology is used by our people day to day, but it's also designed by our people with our clients' best interests at heart. Yeah. No. I think that I think that sums it up really great. And so, yeah, as as Stephanie mentioned, I think this is an important part of the process in finding the right audit partner is understanding what technology they use, what technology they integrate with. Because, know, sometimes you might need more than one platform, depending on your needs. And so making sure that you just understand how the role technology can play, in your audit process, but then not forgetting about the experience of the people as well. So I think that's fantastic. And now we will jump into our final theme, which, of course, is all about AI. There's no conversation we can be having in 2026 that doesn't involve AI in some way. And so I want to talk about strategic AI risk management. So one of the questions that we asked people is about, are you concerned about AI's effect on your compliance requirements? And 72% of people said that they were concerned about this. This is up 24% over last year. And so there's a number of things that people cited in terms of the effective AI and compliance requirements, which might be everything from AI powered cyber attacks. So what that looks like and how people need to change their environments to to protect in that way. It might be about the role of AI in making the compliance process smoother. So we talked about technology. So is there AI involved, you know, in the technology platforms you're using that can drive efficiencies? And then also, there's a lot of new regulations out there related to AI and how companies are managing it. So that might add a new compliance requirement on your team in terms of making sure that you're communicating how you're managing AI. So there's a lot that teams are thinking about here. And knowing that this is top of mind, we wanna make sure that, you know, we're we're thinking about the ways that organizations can manage AI. And as this is new for everyone, like, them draw the road map of what success looks like in this space and, you know, kind of how to take the step one. So related to this is what we found is that four out of five organizations are getting customer inquiries about their AI risk management practices. And so we know that this is something that people are concerned about and can be something that could get in the way of your sales cycles. If you have customers or potential customers asking these questions about how are you managing AI, we need to make sure that your teams are well equipped here. So Stephanie, we'd love to hear from you about what you're hearing and the the role of AI here and how we're making sure that our customers are addressing this in a responsible way. Absolutely. You know, I think that there is kind of a mixed bag on this depending on what industry you're operating within, what country you're operating within. The good news is is that there are a lot of solutions to kinda meet you where you are with AI, but there there is a lot of excitement around AI. I think a lot of implementation around AI, and the compliance space is, you know, starting to catch a lot of that noise as well. You know? So I think that it's just interesting to to hear and see clients in the early stages of preparation for what they are, you know, going to be up against from you know, really, a lot of times, to your point, Elizabeth, you're going to see this in the sales cycle. So you're onboarding new customers or trying to win deals, and you've got a lot of questions that are coming around how you're u utilizing AI and protecting data, you know, ethically, legally. It's an important topic, and I don't think that it's to be taken lightly. I would say that, again, my the biggest piece that I can offer here is that there are a lot of different options that you can you can find here in the AI space to help you feel secure, and to ensure that you're going down the right path from the onset of AI. Because, again, just like anything else, in technology, it is a lot easier to design with security in mind than it is to correct, later down the road. It's important to call and consult your auditor early early on. And I know we have some so sorry. We have some we have some data around, you know, what clients are using through you know, to meet the these AI obligations. and compliance requirements. And I think these are kind of interesting too because we're talking about ISO 42,001, and a lot of customers are going this path. I think that it's a it's a great path to go. 56% are saying that they're trying to, you know, add in other assessment or add controls into existing assessments, which is certainly acceptable, as well. And then 50% are trying to conduct a self assessment. So, you know, there there are so many ways that you can go about this. We always prefer third party testing. That's you know, we think that it's the most unbiased, form of testing that you can have. I think that self awareness is a very great thing to have as a human being, as an organization, as a compliance program. So that is certainly not to be forgotten about either, But, third party attestation is going to give a lot more trust to your to your clients. And and, ultimately, you know, you may not be ready just yet for a full blown ISO 42,001. There are different options to add controls in. There are a lot of different options right now to add in, you know, just an AI add on to certain certain compliance programs. So keep that in mind. I know we've had some conversations sorry. We've had some conversations around SOC one, and the implementation of AI around financials and and how organizations are using those. We can add control objectives. That's a very easy change that we can deploy into your into your audit report. And, you know, again, we're here. If you need some some consultation on that, give us a call. We're happy to have a conversation and really understand how you're using AI, the ethical, you know, considerations that should be put around it, the compliance and security considerations that should be placed around it as well. So, when in doubt, call. I think that, you know, ultimately, at the end of the day, we're a partner that's here to help and and very willing to have these conversations with our or with our clients. So yeah. And pick up the phone. Let's have a conversation about it. I think that there's a lot to be talked about, but it's unique to everyone's set of circumstances. Right? Yeah. Absolutely. And I think that kinda goes back to when we were talking about quality and one of the markers of a quality experience being relevant and customized. Right? So to your point, Stephanie, like, I think that there are some organizations who maybe are AI first software platforms, and they might need a higher level, of AI risk management. You know, their AI is a part of every single piece of their product. You know, they're ingesting a lot of customer data. Like, that ISO 4,001 might be a great fit for them. But like you said, some organizations might just be dipping their toe in the AI waters. And so something, you know, adding some controls on might be the perfect way to manage that. And so, you know, making sure that, you know, you're looking for something that is relevant to your business and your needs. And, again, as always, compliance not being a check the box exercise. It's not one size fits all, and so figuring out what the right path forward is for your organization. Absolutely. So to wrap things up, a couple of takeaways here for you all to think about. So number one is consider whether your auditor meets high quality standards and adjust accordingly. So quality is important. As you see here, you can benchmark yourself against your peers that, you know, 80 plus percent of people care about quality. And so figure out if that's important to your organization and if you have the right folks on your team, you know, as partners that keep quality in mind. Number two is work with a trusted partner to simplify audits. So we know that everyone, you know, knows that consolidating and harmonizing their audits can save time and money. So work with your partner and figure out ways to do that, whether it's on a large scale or even something small of consolidating two frameworks together that can make a big difference for you. Number three, if you're not using technology, you're behind. If you're in that 5% of people who aren't using technology as part of the audit process, you should be doing so. So make sure you're figuring out how technology plays a role in in in your efficiency and in your compliance program. And then number four, understand your AI risk and what strategy is best management manage it. So as Stephanie talked about before, figure out what's right for your business in terms of AI risk management and the right path forward. So, Stephanie, anything else you want to add before we wrap up here as key takeaways for folks today? I don't think so. I think you really nailed it on the head, Elizabeth. You know, I I say this all the time. I say this to our current customers. I say this to our future potential customers. Pick up the phone. Give us a call. Just because you called doesn't mean we're going to necessarily be pushy, for you to buy the right you know, the, any set of of audit standards. We really want to help you, create a compliance program that fits you best, and we'll we'll meet you where you are. So when in doubt, just pick up the phone. We've got audit professionals, that are always happy to help jump in and and help problem solve for these. If you're not really sure where to start, that's where I would recommend. You don't have to go at it alone. We're here to be a partner and always happy to help. Yeah. I think that's a great way to end it. And just a reminder for all of you that this is just scratching the surface of what's available in the 2026 benchmark report. So check out our site. Jackie dropped it in the comments earlier. Make sure you download the report. It is chock full of information. It dives in deeper on these topics and more. And as I mentioned before, we have that great benchmarking tool, an interactive element so you can benchmark yourself. So we'd love to hear your feedback on the report, what's resonating with you, and a great tool for you to take to your teams to let everyone know what people are caring about in this space. But really appreciate your time today. And, Stephanie, thank you so much for all of your great insights. Thank you so, much for. having me. Thanks all.