We already do that on our audits, but it wasn't enough for our regulator. They wanted an actual audit of the compliance function, not just making sure reviews are completed and what those reviews entailed or documenting what training had been done.
_________________________
Do what you can, with what you have, where you are.
~Theodore Roosevelt~