Internal control should generally be designed to assure that ongoing monitoring occurs in the course of normal operations.
Normal operations should include ongoing monitoring.
Ongoing monitoring should be done outside of normal operations.