Which component involves ongoing or separate evaluations of the effectiveness of internal control?

Which component involves ongoing or separate evaluations of the effectiveness of internal control?

• A. Monitoring
• B. Control environment
• C. Information & communication
• D. Risk assessment

Answer: (A)

Monitoring is the part of internal control that specifically covers ongoing or separate evaluations of how well the controls are operating. It includes day-to-day supervisory activities and management reviews (ongoing monitoring) as well as periodic assessments such as internal audits (separate evaluations). These activities identify deficiencies, ensure they’re communicated to the right people, and drive remediation so controls remain effective over time. The other components establish the foundation and how information is gathered and used, but they don’t focus on evaluating control effectiveness itself. The control environment sets the tone at the top, risk assessment identifies what could go wrong, and information and communication ensures relevant information flows to those who need it. Monitoring is the mechanism that verifies whether the controls are actually working and whether changes are needed.

Monitoring is the part of internal control that specifically covers ongoing or separate evaluations of how well the controls are operating. It includes day-to-day supervisory activities and management reviews (ongoing monitoring) as well as periodic assessments such as internal audits (separate evaluations). These activities identify deficiencies, ensure they’re communicated to the right people, and drive remediation so controls remain effective over time.

The other components establish the foundation and how information is gathered and used, but they don’t focus on evaluating control effectiveness itself. The control environment sets the tone at the top, risk assessment identifies what could go wrong, and information and communication ensures relevant information flows to those who need it. Monitoring is the mechanism that verifies whether the controls are actually working and whether changes are needed.