Automated tools regularly test technical controls
Scheduled vulnerability scans, backup verification and configuration drift checks test that controls work, a related discipline to A.8.16's monitoring for signs of an active security incident.
The Sekit technical control runs automated tooling such as scheduled scans continuously, extending the testing rigor this ISO control requires beyond a one-time check before release.
Scheduled vulnerability scans and configuration drift checks exercise technical controls continuously, giving A.8.8's exposure picture ongoing rather than point-in-time evidence.