Transactions with a high inherent risk should be carefully monitored to ensure proper controls are in place and functioning as intended. Risk assessments should be performed regularly to identify any transactions that have become higher risk over time due to changes in processes or the business environment. Controls over high inherent risk transactions need to be tested on a regular basis to confirm they are effectively mitigating the risks.