Don’t Miss the Danger Signs: How to Monitor Your Risk Controls
As advanced as an Internal Control Plan can be, it is not self-sustaining. Independent and/or ongoing evaluations are required to determine if each component is functioning effectively, and to allow deficiencies to be addressed in a timely manner.
Monitoring is the process of comparing what you would expect to what actually happens. Within the Committee of Sponsoring Organizations of the Treadway Commission (COSO) framework, that takes place in three stages: