An organization should monitor and periodically evaluate the system to detect weakness, deficiencies and noncompliance. Management should use a mix of techniques and structures  whereby program personnel "pull" information about noncompliance and also allow stakeholders to "push" information about noncompliance to program personnel. From time to time, management should organize periodic evaluations to take a broad and/or in-depth view of program operation.