DOI: 10.69554/cbpc8646 ISSN: 2633-5638

Automating business information systems for audit compliance in cloud-native organisations

Sylvester Abanseka
Show PDF Cite
Information security compliance audits are increasingly critical yet resource-intensive obligations for modern organisations. This paper examines the intersection of compliance automation and cloud-native business information systems, synthesising peer-reviewed research and industry literature published primarily between 2017 and 2025. The paper traces the evolution of major compliance frameworks (System and Organization Controls 2 [SOC 2], International Organization for Standardization [ISO] 27001, General Data Protection Regulation [GDPR], Health Insurance Portability and Accountability Act [HIPAA]), identifies structural limitations of traditional, manual audit evidence gathering, and evaluates emerging automation technologies —including continuous controls monitoring (CCM), application programming interface (API)-based evidence collection, artificial intelligence and machine learning (AI/ML), and compliance as code — against real-world implementation findings. Key themes show that while automation demonstrably reduces manual compliance effort (by as much as 73 per cent in tested environments) and improves evidence quality and audit cycle times, significant gaps remain in understanding how these technologies perform specifically within cloud-native organisations characterised by dynamic infrastructure, microservices architectures, and continuous deployment pipelines. The paper further highlights limited longitudinal research, insufficient investigation of auditor acceptance of automated evidence, and unresolved tensions between fully automated and human-augmented compliance models. These gaps inform a research agenda aimed at closing the gap between automation’s theoretical potential and its practical adoption in cloud-native contexts. This article is also included in The Business & Management Collection which can be accessed at https://hstalks.com/business/.

More from our Archive