sentence1: Once an organization has identified its risks related to improper payments and undertaken activities to reduce such risks by upgrading its control activities, monitoring performance allows the organization to gauge how well its efforts are working.
sentence2: Once an organization identifies risks of improper payments, they should guage how the efforts are working.