<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Get Frank — Blog</title><description>Notes from the assurance engineering team. Plain English, ISO dates, no marketing vapour.</description><link>https://www.getfrank.ly/</link><language>en-gb</language><item><title>Why we turn buyers away</title><link>https://www.getfrank.ly/blog/why-we-turn-buyers-away/</link><guid isPermaLink="true">https://www.getfrank.ly/blog/why-we-turn-buyers-away/</guid><description>A product built to produce discomfort has to be willing to refuse the customer who wants to look better rather than be better. Here is the qualification we run before we sell anyone anything — and why the discomfort is the point.</description><pubDate>Tue, 14 Jul 2026 00:00:00 GMT</pubDate><category>principles</category><category>brand</category><author>The Frank Team</author></item><item><title>Why your risk register is lying to you</title><link>https://www.getfrank.ly/blog/your-risk-register-is-lying-to-you/</link><guid isPermaLink="true">https://www.getfrank.ly/blog/your-risk-register-is-lying-to-you/</guid><description>Your risk register records what you typed, not what your evidence does. Here is why the heat map and the self-scored residual survive — and what an honest, evidence-backed register looks like instead.</description><pubDate>Tue, 07 Jul 2026 00:00:00 GMT</pubDate><category>risk</category><category>principles</category><author>The Frank Team</author></item><item><title>I&apos;m a lead ISO 27001 auditor. Here&apos;s what I can&apos;t see when I sign off your audit.</title><link>https://www.getfrank.ly/blog/what-i-cant-see-when-i-sign-your-certificate/</link><guid isPermaLink="true">https://www.getfrank.ly/blog/what-i-cant-see-when-i-sign-your-certificate/</guid><description>An honest account of what a point-in-time audit structurally cannot observe — written from the auditor&apos;s chair, not against it. The limits are in the frame, not the diligence.</description><pubDate>Tue, 30 Jun 2026 00:00:00 GMT</pubDate><category>audit</category><category>assurance</category><category>drift</category><author>Adam van Vliet</author></item><item><title>The eleven months your certificate isn&apos;t watching</title><link>https://www.getfrank.ly/blog/the-eleven-months-your-certificate-isnt-watching/</link><guid isPermaLink="true">https://www.getfrank.ly/blog/the-eleven-months-your-certificate-isnt-watching/</guid><description>An audit is a sample taken on a single day; the certificate hangs on the wall for a year. Here is what happens in the gap between the two — and why &quot;compliant at the time&quot; is a breach pattern, not a defence.</description><pubDate>Tue, 23 Jun 2026 00:00:00 GMT</pubDate><category>assurance</category><category>drift</category><category>principles</category><author>Adam van Vliet</author></item><item><title>Why confidence decays — and why your dashboard should say so</title><link>https://www.getfrank.ly/blog/why-confidence-decays/</link><guid isPermaLink="true">https://www.getfrank.ly/blog/why-confidence-decays/</guid><description>Most GRC dashboards print a static green tick. Frank prints an expiry date. Here&apos;s why every claim we publish carries one.</description><pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate><category>assurance</category><category>principles</category><author>The Frank Team</author></item></channel></rss>