Critical systems and events should be monitored in real-time and for other events you can have periodic reviews such as monthly or quarterly assessments based on business requirements.