They called for a transition to continuous, risk-based audits that build cyber assurance directly into day-to-day supervision ...