Building an effective compliance monitoring program

What are the key elements of an effective compliance monitoring program? How do you balance thoroughness with practicality, especially in resource-constrained environments?