Continuous compliance for the cloud with CSPM

At Turbot, we talk a lot about the need for continuous compliance. Whether a small business or a large enterprise, more and more companies are entering into regulated industries, or have the need to adhere to particular governance models like HIPAA, PCI, NIST, GxP, or others. So, what is the difference between being compliant, and being continuously compliant? It's a matter of what happens after an audit.