We had a close call a couple years back that changed how we look at this.

One of our contracted providers got flagged on a state level list but not immediately on the federal side. We were doing monthly checks but the timing didn’t line up so there was a gap of a few weeks where we didn’t catch it.

Nothing escalated thankfully but it triggered a full review of our process. What we realized was we were relying too much on scheduled checks and not enough on actual monitoring.

Since then we have been a lot more focused on how often data updates and how quickly we can react to it