Courts, banks, hospitals and police forces all face a version of the same problem: media that may have been generated, people who may not be who they claim, and decisions somebody will ask about later. Each sector tends to buy its own answer, which is understandable, and leaves an organisation holding several tools that describe the same world in different words.
For a public body the second problem is the harder one. An outcome on its own is not enough. An auditor, a public accounts committee, a tribunal or a court will ask what was found, what it was based on, who was told and what was decided, and an answer that cannot be produced on request tends to be treated as an answer that never existed.
The checks below run across those sectors and report the same way, keeping the reasoning with the result and a record of what was examined. What an organisation ends up holding is not only detection, but an account of it that survives being asked about.