Compliance automation: GRC platform comparison, control mapping to frameworks, evidence collection, audit readiness and