sentence1: The organizations focused their monitoring efforts primarily on (1) determining if controls were in place and operating as intended to reduce risk and
sentence2: They want to determine if there are certain controls.