## Monitoring of Controls

Monitoring is the fifth and final component of Internal Control. It is the process by which management assesses the quality and effectiveness of internal controls over time.

### Core Purpose

> Monitoring = assessing whether controls are operating as intended and whether they have been modified as per changes in conditions.

Without monitoring, controls can become outdated or stop functioning as the business evolves.

### How Management Performs Monitoring

Management may use:

1. Ongoing Evaluations — controls embedded into normal, recurring operations (e.g., automatic exception reports, daily reconciliations).

2. Separate Evaluations — periodic stand-alone assessments (e.g., internal audit reviews, special investigations).

3. Both — a combination of the above.

### Ongoing Activities vs. Separate Evaluations

Feature	Ongoing Activities	Separate Evaluations
Frequency	Continuous / daily	Periodic / ad hoc
Integration	Built into regular operations	Stand-alone review
Example	Exception reports, supervisory review	Internal audit, management review

### Use of Third-Party Information

Management may also use external information for monitoring:

Customer complaints
Comments and suggestions from customers or regulators
Reports from service organisations

### Auditor's Perspective on Monitoring

The auditor seeks to understand the monitoring activities that the entity uses to monitor internal control over financial reporting. This helps the auditor assess whether deficiencies identified during the audit have been identified and corrected by management.

Worked example

### Example 1

Example 1 — Ongoing Monitoring:

An accounts payable system automatically flags any invoice over ₹5 lakhs that lacks a matching purchase order. The controller reviews this exception report every morning. This is ongoing monitoring — it is built into the normal daily workflow.

### Example 2

Example 2 — Separate Evaluation:

At year-end, the internal audit team conducts a review of the cash handling procedures at all branch offices and reports findings to the Audit Committee. This is a separate evaluation — it is a distinct, periodic exercise rather than a routine activity.

### Example 3

Exam Theory Question:

What is meant by 'Monitoring' as a component of Internal Control? How does management perform monitoring?

Answer outline: Monitoring is the process of assessing the effectiveness of internal controls over time to ensure they operate as intended and are updated for changed conditions. Management performs monitoring through: (i) Ongoing evaluations built into regular operations, (ii) Separate periodic evaluations such as internal audit, and (iii) using third-party information like customer complaints. The auditor must understand these monitoring activities to assess the control environment.

⚠️ Common exam mistakes

Confusing 'monitoring' with 'control activities' — monitoring is about evaluating whether other controls work; control activities are the controls themselves.
Omitting the mention of third-party information (customer complaints, suggestions) as a source for monitoring — examiners look for this detail.
Not explaining the distinction between ongoing evaluations (continuous, embedded) and separate evaluations (periodic, standalone).
Forgetting the key phrase: controls must be operating 'as intended' AND 'modified as per change in conditions' — both parts are required for a complete answer.

Reference:

Now that you've read this — what's next?

Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.

🔥 Drill 5 Qs on this → ✍️ Adaptive practice →

Monitoring — Component of Internal Control

Worked example

⚠️ Common exam mistakes