An analyst and two practitioners examine where audit readiness breaks down and how to automate from scope to evidence generation.