can help ensure that senior management receives persuasive data regarding the effectiveness of key controls. Although policies, procedures, programs, controls for example. a highly decentralized SU1.ICture may make it difficult for centralized auditing and monitoring functions to help ensure success-been taken into account?
• Have key stakeholders responsible for compliance, investigations, and operations (e.g .. human resources. legal. security, finance, and accounting) been consulted during the planning phase of auditing and monitoring activities'?
• Is there an establrshed timeline for implementation of auditing and monitoring activities?
• Is there a process for evaluating the success of such implementation, and of redesign efforts. if necessary?