20. Periodic spot checks and pen tests

See how embedding Security Control Assessors, with technical proficiency, can support spot check audit processes under Monitor here.