Periodic review of controls and system effectiveness