Which COSO component focuses on ongoing evaluation and remediation of controls?

• A. Monitoring Activities identify and assess risks.
• B. Monitoring Activities set policies and procedures.
• C. Monitoring Activities focus on ongoing evaluation and remediation of controls.
• D. Monitoring Activities report financial statements.

Answer: (C)

Monitoring is the component that provides ongoing evaluation of the effectiveness of internal controls and ensures remediation of deficiencies. It involves continuous oversight, management and supervisory activities, and follow-up to confirm that any identified control gaps are fixed and remain effective over time. This is why the statement about ongoing evaluation and remediation best captures what Monitoring does. The other descriptions refer to setting policies and procedures (a control activity) or to reporting and information flow, not to the continuous oversight and remediation focus of Monitoring.