Audit/Monitor Controls or Audit/Monitor BEFORE Control?
...WSJ happens :-) - refresh your memory of the "WSJ saga" here ), but then spent years trying to bring policy and reality together (and end up with an environment which is "half-controlled") Won't it be better to audit first, then control
Obviously, "do IDS before IPS" falls under the same principle: monitor first, [ try to ] control second....
