By conducting regular independent audits, reviewing the quality/closure rate of alerts and SAR filings, testing adherence to policies/procedures, and measuring the detection rate of suspicious activity.