Per ICH-GCP, monitoring activities include source data verification, review of regulatory documents, and follow-up on deviations or safety issues. Risk-based monitoring (RBM) focuses effort on critical data and processes.