{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-140.40","name":"Compliance Monitoring & Testing","level":2,"parent_id":"BC-140","l1_id":"BC-140","industry":"cross-industry","macro_id":"MC-10","path":["Compliance","Compliance Monitoring & Testing"],"description":"Check on a schedule whether the enterprise is actually complying, find the gaps before a regulator does, and track them to closure.","aliases":["Compliance Testing","Second-Line Monitoring","Compliance Assessment"],"in_scope":["Risk-based compliance monitoring plan","Transaction and control testing for compliance","Issue logging and remediation tracking"],"out_of_scope":["Third-line internal audit testing (see BC-160)","Quality inspections of products (see BC-550)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-140.40.10","BC-140.40.20","BC-140.40.30"]},"crosswalk":{"realized_by":[{"product_id":"PR-100","product":"ServiceNow","pc_id":"PC-100.80","pc":"Governance, Risk and Compliance","maturity":"partial","via":null},{"product_id":"PR-110","product":"SAP S/4HANA","pc_id":"PC-110.90","pc":"Governance, Risk and Compliance","maturity":"partial","via":null},{"product_id":"PR-150","product":"Oracle Fusion Cloud Applications","pc_id":"PC-150.70","pc":"Risk Management and Compliance","maturity":"partial","via":null},{"product_id":"PR-190","product":"Okta","pc_id":"PC-190.50","pc":"Identity Governance","maturity":"partial","via":null}],"used_in":[],"patterns":[],"stacks":[],"books":[]},"ancestors":[{"id":"BC-140","name":"Compliance","level":1}],"children":[{"id":"BC-140.40.10","name":"Monitoring Plan Development","level":3,"child_count":0},{"id":"BC-140.40.20","name":"Compliance Testing","level":3,"child_count":0},{"id":"BC-140.40.30","name":"Compliance Issue Remediation","level":3,"child_count":0}]}