2017-09-15: Good and Bad Practices for Risk and Control Monitoring