Regulators are modernizing their expectations, and it's become clear that validation can no longer function as a point-in-time event.