I am trying to learn the processes related to mitigation control monitoring. I understand a control requires an approver and a monitor. So what functions does the mitigation monitor perform ?.
I'm interested in any reports that need to be working that would be employed by the monitor. Is there an enforcement mechanism logging or reporting when the monitor runs related reports on mitigating controls ? Also, is there available documentation on this process ?