Reducing Audit Failures through Proactive Infrastructure Compliance Monitoring
DOI:
https://doi.org/10.63282/3050-9416.IJAIBDCMS-V7I3P102Keywords:
Infrastructure Compliance, Continuous Monitoring, Cloud Computing, Audit Failure, Proactive Governance, Devsecops, Policy-As-CodeAbstract
Cloud computing, Infrastructure as Code (IaC), and continuous delivery have made it harder to maintain regulatory compliance. Traditional compliance models that rely on periodic checks and manual evidence are no longer effective. This paper looks at how proactive infrastructure compliance monitoring can help reduce audit failures in today’s IT systems. It covers the technical, operational, and cultural changes needed for continuous compliance, including policy-as-code, agentless scanning, automation, and integration with CI/CD pipelines. The results show that proactive monitoring improves system reliability, reduces regulatory risk, and simplifies audits in complex environments.
References
1. Andreas Georg Scherer and Guido Palazzo, “The New Political Role of Business in a Globalized World: A Review of a New Perspective on CSR and its Implications for the Firm, Governance, and Democracy,” Wiley, vol. 48, no. 4, pp. 899–931, May 2010, doi: 10.1111/j.1467-6486.2010.00950.x.
2. Kannan Govindan, Mahesh Shaw, and Abhijit Majumdar, “Social sustainability tensions in multi-tier supply chain: A systematic literature review towards conceptual framework development,” Elsevier BV, vol. 279, pp. 123075–123075, Jul. 2020, doi: 10.1016/j.jclepro.2020.123075.
3. Hans Bonde Christensen, Luzi Hail, and Christian Leuz, “Capital-Market Effects of Securities Regulation: Prior Conditions, Implementation, and Enforcement,” Oxford University Press, vol. 29, no. 11, pp. 2885–2924, Jul. 2016, doi: 10.1093/rfs/hhw055.
4. Patrick Dunleavy, “New Public Management Is Dead--Long Live Digital-Era Governance,” Oxford University Press, vol. 16, no. 3, pp. 467–494, Sep. 2005, doi: 10.1093/jopart/mui057.
5. Hanane Allioui and Youssef Mourdi, “Exploring the Full Potentials of IoT for Better Financial Growth and Stability: A Comprehensive Survey,” Multidisciplinary Digital Publishing Institute, vol. 23, no. 19, pp. 8015–8015, Sep. 2023, doi: 10.3390/s23198015.
6. Yogesh K. Dwivedi et al., “Artificial Intelligence (AI): Multidisciplinary perspectives on emerging challenges, opportunities, and agenda for research, practice and policy,” Elsevier BV, vol. 57, pp. 101994–101994, Aug. 2019, doi: 10.1016/j.ijinfomgt.2019.08.002.
7. Simon Elias Bibri, John Krogstie, Amin Kaboli, and Alexandre Alahi, “Smarter eco-cities and their leading-edge artificial intelligence of things solutions for environmental sustainability: A comprehensive systematic review,” Elsevier BV, vol. 19, pp. 100330–100330, Oct. 2023, doi: 10.1016/j.ese.2023.100330.
8. Sajid Ali et al., “Explainable Artificial Intelligence (XAI): What we know and what is left to attain Trustworthy Artificial Intelligence,” Elsevier BV, vol. 99, pp. 101805–101805, Apr. 2023, doi: 10.1016/j.inffus.2023.101805.
9. Ahmed Afif Monrat, Olov Schelén, and Karl Andersson, “A Survey of Blockchain From the Perspectives of Applications, Challenges, and Opportunities,” Institute of Electrical and Electronics Engineers, vol. 7, pp. 117134–117151, Jan. 2019, doi: 10.1109/access.2019.2936094.
10. Merlinda Andoni et al., “Blockchain technology in the energy sector: A systematic review of challenges and opportunities,” Elsevier BV, vol. 100, pp. 143–174, Nov. 2018, doi: 10.1016/j.rser.2018.10.014.
11. Elvira Ismagilova, Laurie Hughes, Nripendra P. Rana, and Yogesh K. Dwivedi, “Security, Privacy and Risks Within Smart Cities: Literature Review and Development of a Smart City Interaction Framework,” Springer Science+Business Media, vol. 24, no. 2, pp. 393–414, Jul. 2020, doi: 10.1007/s10796-020-10044-1.
12. Sílvia H. Bonilla, Helton R. O. Silva, Márcia Terra da Silva, Rodrigo Franco Gonçalves, and José Benedito Sacomano, “Industry 4.0 and Sustainability Implications: A Scenario-Based Analysis of the Impacts and Challenges,” Multidisciplinary Digital Publishing Institute, vol. 10, no. 10, pp. 3740–3740, Oct. 2018, doi: 10.3390/su10103740.
13. Maria Stoyanova, Yannis Nikoloudakis, Spyros Panagiotakis, Evangelos Pallis, and Evangelos Markakis, “A Survey on the Internet of Things (IoT) Forensics: Challenges, Approaches, and Open Issues,” Institute of Electrical and Electronics Engineers, vol. 22, no. 2, pp. 1191–1221, Jan. 2020, doi: 10.1109/comst.2019.2962586.
14. Calin Boje, Annie Guerriero, S Kubicki, and Yacine Rezgui, “Towards a semantic Construction Digital Twin: Directions for future research,” Elsevier BV, vol. 114, pp. 103179–103179, Mar. 2020, doi: 10.1016/j.autcon.2020.103179.
15. Yogesh K. Dwivedi et al., “Opinion Paper: ‘So what if ChatGPT wrote it?’ Multidisciplinary perspectives on opportunities, challenges and implications of generative conversational AI for research, practice and policy,” Elsevier BV, vol. 71, pp. 102642–102642, Mar. 2023, doi: 10.1016/j.ijinfomgt.2023.102642.
16. Abdulaziz Aldoseri, Khalifa N. Al‐Khalifa, and A.M.S. Hamouda, “Re-Thinking Data Strategy and Integration for Artificial Intelligence: Concepts, Opportunities, and Challenges,” Multidisciplinary Digital Publishing Institute, vol. 13, no. 12, pp. 7082–7082, Jun. 2023, doi: 10.3390/app13127082.
17. Shahriar Akter and Samuel Fosso Wamba, “Big data analytics in E-commerce: a systematic review and agenda for future research,” Springer Science+Business Media, vol. 26, no. 2, pp. 173–194, Mar. 2016, doi: 10.1007/s12525-016-0219-0.
18. Dmitry Ivanov, “Viable supply chain model: integrating agility, resilience and sustainability perspectives—lessons from and thinking beyond the COVID-19 pandemic,” Springer Science+Business Media, vol. 319, no. 1, pp. 1411–1431, May 2020, doi: 10.1007/s10479-020-03640-6.
19. Vikas Hassija, Vinay Chamola, Vikas Saxena, Divyansh Jain, Pranav Goyal, and Biplab Sikdar, “A Survey on IoT Security: Application Areas, Security Threats, and Solution Architectures,” Institute of Electrical and Electronics Engineers, vol. 7, pp. 82721–82743, Jan. 2019, doi: 10.1109/access.2019.2924045.
20. Ahmed Al Kuwaiti et al., “A Review of the Role of Artificial Intelligence in Healthcare,” Multidisciplinary Digital Publishing Institute, vol. 13, no. 6, pp. 951–951, Jun. 2023, doi: 10.3390/jpm13060951.
21. Sarah Brayne, “Big Data Surveillance: The Case of Policing,” SAGE Publishing, vol. 82, no. 5, pp. 977–1008, Aug. 2017, doi: 10.1177/0003122417725865.
22. Paul E. McMahon, Tieling Zhang, and Richard Dwight, “Requirements for Big Data Adoption for Railway Asset Management,” Institute of Electrical and Electronics Engineers, vol. 8, pp. 15543–15564, Jan. 2020, doi: 10.1109/access.2020.2967436.
23. Giuseppe Piras, Sofia Agostinelli, and Francesco Muzi, “Smart Buildings and Digital Twin to Monitoring the Efficiency and Wellness of Working Environments: A Case Study on IoT Integration and Data-Driven Management,” Multidisciplinary Digital Publishing Institute, vol. 15, no. 9, pp. 4939–4939, Apr. 2025, doi: 10.3390/app15094939.
24. Ioan Petri, Yacine Rezgui, Ali Ghoroghi, and Ateyah Alzahrani, “Digital twins for performance management in the built environment,” Elsevier BV, vol. 33, pp. 100445–100445, Feb. 2023, doi: 10.1016/j.jii.2023.100445.
25. Ramy Elsehrawy, Bimal Kumar, and Richard Watson, “A digital twin uses classification system for urban planning & city infrastructure management,” Conseil International du Bâtiment, vol. 26, pp. 832–862, Nov. 2021, doi: 10.36680/j.itcon.2021.045.
26. Devika Menon, Bharath Anand, and Chiranji Lal Chowdhary, “Digital Twin: Exploring the Intersection of Virtual and Physical Worlds,” Institute of Electrical and Electronics Engineers, vol. 11, pp. 75152–75172, Jan. 2023, doi: 10.1109/access.2023.3294985.
27. Rubén Alonso, Rosamaria Olivadese, Andrea Ibba, and Diego Reforgiato Recupero, “Towards the definition of a European Digital Building Logbook: A survey,” Elsevier BV, vol. 9, no. 9, pp. e19285–e19285, Aug. 2023, doi: 10.1016/j.heliyon.2023.e19285.
28. Izabela Rojek, Tomasz Marciniak, and Dariusz Mikołajewski, “Digital Twins in 3D Printing Processes Using Artificial Intelligence,” Multidisciplinary Digital Publishing Institute, vol. 13, no. 17, pp. 3550–3550, Sep. 2024, doi: 10.3390/electronics13173550.
29. Fredrick Ahenkora Boamah, Xiaohua Jin, Sepani Senaratne, and Srinath Perera, “Transition from Traditional Knowledge Retrieval into AI-Powered Knowledge Retrieval in Infrastructure Projects: A Literature Review,” Multidisciplinary Digital Publishing Institute, vol. 10, no. 2, pp. 35–35, Feb. 2025, doi: 10.3390/infrastructures10020035.
30. Abdullahi B. Saka et al., “GPT models in construction industry: Opportunities, limitations, and a use case validation,” Elsevier BV, vol. 17, pp. 100300–100300, Dec. 2023, doi: 10.1016/j.dibe.2023.100300.
31. Claudio Sassanelli, Tiziano Arriga, Stefano Zanin, Idiano D’Adamo, and Sergio Terzi, “Industry 4.0 Driven Result-oriented PSS: An Assessment in the Energy Management,” EconJournals, vol. 12, no. 4, pp. 186–203, Jul. 2022, doi: 10.32479/ijeep.13313.
32. Frank Ato Ghansah and David J. Edwards, “Digital Technologies for Quality Assurance in the Construction Industry: Current Trend and Future Research Directions towards Industry 4.0,” Multidisciplinary Digital Publishing Institute, vol. 14, no. 3, pp. 844–844, Mar. 2024, doi: 10.3390/buildings14030844.
33. Neil J. Rowan et al., “Digital transformation of peatland eco-innovations (‘Paludiculture’): Enabling a paradigm shift towards the real-time sustainable production of ‘green-friendly’ products and services,” Elsevier BV, vol. 838, no. Pt 3, pp. 156328–156328, May 2022, doi: 10.1016/j.scitotenv.2022.156328.
34. Dimitrios Siakas, Γεώργιος Λαμπρόπουλος, and Kerstin Siakas, “Autonomous Cyber-Physical Systems Enabling Smart Positive Energy Districts,” Multidisciplinary Digital Publishing Institute, vol. 15, no. 13, pp. 7502–7502, Jul. 2025, doi: 10.3390/app15137502.
35. Osama A. I. Hussain, Robert Moehler, Stuart D.C. Walsh, and Dominic D. Ahiaga-Dagbui, “Minimizing Cost Overrun in Rail Projects through 5D-BIM: A Systematic Literature Review,” Multidisciplinary Digital Publishing Institute, vol. 8, no. 5, pp. 93–93, May 2023, doi: 10.3390/infrastructures8050093.
36. M. Papazoglou and Willem‐Jan van den Heuvel, “Service oriented architectures: approaches, technologies and research issues,” Springer Science+Business Media, vol. 16, no. 3, pp. 389–415, Mar. 2007, doi: 10.1007/s00778-007-0044-3.
37. Rocha, Jorge and Abrantes, Patrícia, “Geographic information systems and science,” Taylor & Francis, vol. 4, no. 4, pp. 360–361, Jun. 2011, doi: 10.1080/17538947.2011.582276.
38. Shanaka Kristombu Baduge et al., “Artificial intelligence and smart vision for building and construction 4.0: Machine and deep learning methods and applications,” Elsevier BV, vol. 141, pp. 104440–104440, Jun. 2022, doi: 10.1016/j.autcon.2022.104440.
39. Natalia Díaz-Rodríguez, Javier Del Ser, Mark Coeckelbergh, Marcos López de Prado, Enrique Herrera‐Viedma, and Francisco Herrera, “Connecting the dots in trustworthy Artificial Intelligence: From AI principles, ethics, and key requirements to responsible AI systems and regulation,” Elsevier BV, vol. 99, pp. 101896–101896, Jun. 2023, doi: 10.1016/j.inffus.2023.101896.
40. Jennifer L. Gardy and Nicholas J. Loman, “Towards a genomics-informed, real-time, global pathogen surveillance system,” Nature Portfolio, vol. 19, no. 1, pp. 9–20, Nov. 2017, doi: 10.1038/nrg.2017.88.
41. Vinay Chamola, Vikas Hassija, Vatsal Gupta, and Mohsen Guizani, “A Comprehensive Review of the COVID-19 Pandemic and the Role of IoT, Drones, AI, Blockchain, and 5G in Managing its Impact,” Institute of Electrical and Electronics Engineers, vol. 8, pp. 90225–90265, Jan. 2020, doi: 10.1109/access.2020.2992341.
42. Zeynep Engin and Philip Treleaven, “Algorithmic Government: Automating Public Services and Supporting Civil Servants in using Data Science Technologies,” Oxford University Press, vol. 62, no. 3, pp. 448–460, Jul. 2018, doi: 10.1093/comjnl/bxy082.
43. Bart Baesens, Ravi Bapna, James R. Marsden, Jan Vanthienen, and J. L. Zhao, “Transformational Issues of Big Data and Analytics in Networked Business,” MIS Quarterly, vol. 40, no. 4, pp. 807–818, Dec. 2016, doi: 10.25300/misq/2016/40:4.03.
44. Trisha Greenhalgh et al., “Beyond Adoption: A New Framework for Theorizing and Evaluating Nonadoption, Abandonment, and Challenges to the Scale-Up, Spread, and Sustainability of Health and Care Technologies,” JMIR Publications, vol. 19, no. 11, pp. e367–e367, Nov. 2017, doi: 10.2196/jmir.8775.
45. Sandra Scott-Hayward, Sriram Natarajan, and Sakir Sezer, “A Survey of Security in Software Defined Networks,” Institute of Electrical and Electronics Engineers, vol. 18, no. 1, pp. 623–654, Jul. 2015, doi: 10.1109/comst.2015.2453114.
46. Ann S. Marucheck, Noel P. Greis, Carlos Mena, and Linning Cai, “Product safety and security in the global supply chain: Issues, challenges and research opportunities,” Wiley, vol. 29, no. 7–8, pp. 707–720, Jul. 2011, doi: 10.1016/j.jom.2011.06.007.
47. Yachamaneni, T., Arora, A. S., & Kotadiya, U. (2024). Optimizing Big Data Processing Workflows using PySpark and Google Cloud Platform: A Performance Evaluation of Data Locality and Caching Strategies. This paper has been accepted and published in the International Journal of Intelligent Systems and Applications of Engineering on July, 2.
