What Is the BEST Way to Achieve On-Going Compliance Monitoring

What is the BEST way to achieve on-going compliance monitoring in an organization?

A) Outsource compliance to a 3 rd party vendor and let them manage the program. Outsource compliance to a 3 rd party vendor and let them manage the program.
B) Have Compliance Direct Information Security to fix issues after the auditor's report.
C) Only check compliance right before the auditors are scheduled to arrive onsite.
D) Have Compliance and Information Security partner to correct issues as they arise.