A four-year run of findings suggests a structural problem, with agencies adding separate reporting demands on governance staff already managing heavy compliance workloads.