Monitoring, as mentioned previously, refers to the entity’s
ability to monitor the effectiveness of controls as they operate
daily, individually and in cooperation with other controls.
Some of the various ways in which controls over monitoring of
control effectiveness could be evaluated regarding the risks
associated with those activities include:
• Ongoing and separate evaluations on internal controls over
financial reporting
• Identifying and reporting deficiencies
• Assessing the quality of internal control performance
over time
• Putting procedures in place to modify the control system as
needed (add, change, delete)
• Ensuring effective management review of control
system status
• Checking for the absence of monitoring systems, which tends
to allow people to reduce vigilance on controls
• Utilizing relevant external information or independent
monitors
• Analyzing control objectives and their related control
activities
• Reviewing changes to controls since the date of the last
report or within the last 12 months