1 piece
Monitoring answers whether the system is running. Evaluation answers whether it is right. Those are two different dials and almost every organisation has built only the first, which is why the honest sentence after an incident is not that monitoring failed but that nothing was ever watching the thing that broke.