premise: Once an organization has identified its risks related to improper payments and undertaken activities to reduce such risks by upgrading its control activities, monitoring performance allows the organization to gauge how well its efforts are working.
hypothesis: They need to get a computer program to target improper payments.