How do compliance programs that are not working typically get exposed and fixed?

Compliance programs needs to be evaluated at regular intervals to check their effectiveness. Example safety complaince can be checked based on the hazards before and after the given implementation.

Same can be fixed or improved based on the difference in the standard bar set by the company. To improve, tried and tested policies can be adopted or specialist needs to be hired if the improvement required is deffered by a large scale.