anchor: Internal control should generally be designed to assure that ongoing monitoring occurs in the course of normal operations.
positive: Normal operations should include ongoing monitoring.
negative: Ongoing monitoring should be done outside of normal operations.