From the annual review to perpetual monitoring
Most compliance frameworks still carry a dangerous assumption baked in from the paper era: that a customer screened clean at onboarding stays clean until their next periodic review — one, three, sometimes four years later.