Under the COSO Internal Control framework, monitoring should include both ongoing evaluations and periodic, separate evaluations. Is this true or false?

Under the COSO Internal Control framework, monitoring should include both ongoing evaluations and periodic, separate evaluations. Is this true or false?

• A. True
• B. False
• C. Not sure
• D. Not applicable

Answer: (A)

In the COSO framework, monitoring internal control involves both ongoing evaluations embedded in regular operations and separate evaluations conducted periodically to provide an independent assessment. Ongoing evaluations occur as part of day-to-day activities—supervision, reviews, automated checks, and performance metrics—so issues can be spotted and addressed promptly. Separate evaluations, carried out at planned intervals by internal auditors or other independent parties, test the design and effectiveness of controls more deeply than routine activities. Together, they give continuous visibility into control performance and an objective, periodic validation of weaknesses and remediation. So the statement is true: monitoring should include both ongoing evaluations and periodic, separate evaluations. Relying on only one type could miss issues or fail to provide independent assurance.

In the COSO framework, monitoring internal control involves both ongoing evaluations embedded in regular operations and separate evaluations conducted periodically to provide an independent assessment. Ongoing evaluations occur as part of day-to-day activities—supervision, reviews, automated checks, and performance metrics—so issues can be spotted and addressed promptly. Separate evaluations, carried out at planned intervals by internal auditors or other independent parties, test the design and effectiveness of controls more deeply than routine activities. Together, they give continuous visibility into control performance and an objective, periodic validation of weaknesses and remediation. So the statement is true: monitoring should include both ongoing evaluations and periodic, separate evaluations. Relying on only one type could miss issues or fail to provide independent assurance.