u/RepulsiveWeekend5453

From what I've seen compliance gets framed as monitoring alot but monitoring is only what happens AFTER something already slipped through and that still matters of course but if the first real control shows up after the transaction then the team is pretty much reacting not preventing.

For me(not claiming to be an expert) stronger controls start earlier at the point where the transaction is decided so policy gets enforced before anyone has to open a case or explain why something that never should’ve cleared ended up moving anyway.