Compliance monitoring is defined in two ways: validation controls are in place and functioning as expected. However, compliance monitoring also means a process of identifying incidents and inappropriate behavior. To meet regulatory requirements and avoid liability, organizations should address both elements of compliance monitoring. Organizations also need to have processes in place for individuals reporting suspected or known misbehavior involving regulated data – the whistleblowers. It is important to keep an audit trail for a defined period so they can be evaluated when something is brought to the organization’s attention.”]
Source: https://www.csoonline.com/article/2117206/deciphering-the-dual-meaning-of-compliance-monitoring.html