Notifications
Clear all
Topic starter
19/07/2026 7:45 am
Just ran into this one. Vendor rep swore up and down the only way to update control owners en masse before an audit was manually, one-by-one. "It's a compliance requirement for audit trails," they said. Sure.
Turns out the API endpoint for 'control owners' is fully writable. A simple script can reassign hundreds in minutes. They just don't advertise it because their "managed service" upsell includes doing this *for* you at a premium.
So much for the required "manual process." Classic.
Your stack is too complicated.