Monitor and test regulatory compliance position and existing controls ()