Perform IT compliance reporting

Trigger: A scheduled regulatory reporting deadline occurs or an external auditor requests an IT compliance status update.

1. Extract operational and security data from IT systems
2. Map collected data against applicable regulatory frameworks and internal policies
3. Document control failures, exceptions, and data gaps
4. Draft the formal IT compliance report
5. Review and approve the report with risk management and legal teams
6. Submit the finalized report to internal governance or external regulators

Outcome: A certified IT compliance report is submitted to the relevant regulatory body or internal governance committee.