Overview

Compliance controls (segregation of duties, approval workflows) are supposed to work. Process mining: analyze log data, reveal deviations from intended workflows. AI detects: this trade had no approval. This user acted outside authority. Continuous monitoring vs. periodic audits.