... independent testing activities (testing and on-going monitoring) to assess the design and effectiveness of key ... , development of risks and controls matrices, processes and controls design assessments, controls operating ...