A Top-Down Approach to Risk Management and Internal Control-Issue #4: Relying on Ongoing Monitoring to Test Controls Performance, to Reduce the Scope of Separate Testing