A question that quietly divides compliance teams: Is your compliance matrix:
- a deliverable, something you assemble near milestones review (PDR, CDR, ...), or
- a living structure you actually work from day to day?
If it's the first, the matrix is always slightly behind reality. Every design change opens a gap between what the matrix says and what's true, and you close that gap manually, sometimes under time pressure, right when you can least afford errors. If it's the second, the matrix is the picture — not a report of it. I know which one I'd defend, if I'd need to choose. But I've seen serious programmes run both ways. Which camp are you in? Do you know other ways to tackle the problem "auditable compliance data vs. live picture of the program"? Share with us your opinions and ideas: we are always eager to hear the voice of the industry!