Monitoring involves external oversight of internal controls by management or other parties outside the process. It may also include the application of independent methodologies, such as customized procedures or standard checklists, by employees within a process. If management fails to establish a monitoring process for its internal control system, either in the form of independent evaluations or ongoing monitoring, then a satisfactory rating for this control component normally would be inappropriate.