mnli premise: The organizations focused their monitoring efforts primarily on (1) determining if controls were in place and operating as intended to reduce risk and hypothesis: The organizations want to prevent lots of risk.