Watch this video on YouTube
What is the recommended initial step for an IS auditor to implement continuous monitoring systems?