ControlDrift

ControlDrift is a web app (with optional Slack/Teams integration) that continuously checks whether operational controls are actually being executed, not just documented. It connects to common systems (ticketing, IAM, cloud logs, HRIS, spreadsheets) and runs simple “control evidence rules” like: access reviews completed on time, privileged accounts unchanged without approval, backup jobs succeeded, vendor SOC reports collected, reconciliations signed off, and incident postmortems filed. When evidence is missing or late, it opens a task, assigns an owner, and escalates based on policy. An AI assistant helps map controls to data sources, drafts evidence requests, and summarizes exceptions for auditors and leadership. This is not a full GRC suite; it’s a lightweight control-execution monitor aimed at reducing operational surprises and audit fire drills.