<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Spoiledlunch</title><link>https://511d98a7.spoiledlunch.pages.dev/</link><description>Nerdy Stuff. Tech Talk. Zero Freshness. Analysis and commentary on GRC, security, and AI.</description><generator>Hugo 0.160.1</generator><language>en-us</language><lastBuildDate>Tue, 26 May 2026 09:00:00 -0400</lastBuildDate><atom:link href="https://511d98a7.spoiledlunch.pages.dev/tags/exceptions/" rel="self" type="application/rss+xml"/><item><title>Compliance Exceptions Tell You More Than Your Passed Controls</title><link>https://511d98a7.spoiledlunch.pages.dev/articles/2026-05-01-compliance-exceptions-tell-you-more-than-your-passed-controls/</link><pubDate>Tue, 26 May 2026 09:00:00 -0400</pubDate><guid>https://511d98a7.spoiledlunch.pages.dev/articles/2026-05-01-compliance-exceptions-tell-you-more-than-your-passed-controls/</guid><description>Article • May 26, 2026 • 4 min read | Topics: GRC | Organizations love to report passed controls because passed controls are flattering.
They suggest order. They suggest repeatability. They suggest that the environment behaves the way the framework …</description><author>Spoiledlunch</author><category>GRC</category><category>compliance</category><category>exceptions</category><category>controls</category><category>audit</category></item></channel></rss>