Answer:
This is risk based but often involves a random selection of staff and a review of one or two quarters of bank statements. Looking for odd deposits is a key as those could indicate embezzlement or fraud or those "living beyond their means."
This is a very sensitive issue and while all employees need to be subject to review and random selection, it is more than just a privacy issue based on who is being reviewed and what statement contents can reveal.
---------------------------------