As a manager, Lucy focuses on the effectiveness of internal controls over time. Which component of internal control is she engaging in?

• A. Risk assessment
• B. Control activities
• C. Control environment
• D. Monitoring

Answer: (D)

Monitoring internal controls involves ongoing assessment of whether the controls are functioning effectively over time. By focusing on how well the controls work as operations proceed, Lucy is evaluating the sustained performance of the internal control system, detecting deficiencies, and ensuring any needed remediation is carried out. This continuous review can be part of both management’s ongoing activities and separate evaluations, all aimed at confirming that governance and control processes keep operating as intended as circumstances change.

This differs from risk assessment, which is about identifying and analyzing potential risks and their likelihood and impact; from the control environment, which is the overall tone, integrity, and attitude of the organization set by leadership; and from control activities, which are the specific policies and procedures put in place to mitigate identified risks. The focus on ongoing effectiveness over time is the hallmark of monitoring.