ADA Continuous Auditing and Monitoring 2 — Questions and Answers
Question 1: Which metric best measures the effectiveness of a continuous monitoring program over time?
- The number of alerts generated per day
- The ratio of true positives to total alerts (precision rate) (Correct answer)
- Total dollar value of transactions reviewed
- The number of employees trained on the system
Correct answer: The ratio of true positives to total alerts (precision rate)
Precision (true positives / total alerts) measures how many alerts represent real issues, indicating whether the program is generating actionable findings.
Question 2: In continuous auditing, 'audit universe coverage' refers to:
- The percentage of the population tested by continuous controls (Correct answer)
- The total storage capacity of the audit data warehouse
- The number of audit staff assigned to the continuous program
- The frequency at which the ERP system is backed up
Correct answer: The percentage of the population tested by continuous controls
Audit universe coverage measures what proportion of the auditable population is subject to automated continuous testing.
Question 3: An auditor using continuous monitoring notices that the alert volume for duplicate payments has dropped to zero over three months. The auditor should FIRST:
- Conclude that duplicate payments have been eliminated and close the control
- Verify that the monitoring rule is still active and processing data correctly (Correct answer)
- Increase the sensitivity threshold on the duplicate payment rule
- Report the improvement as a positive finding without further review
Correct answer: Verify that the monitoring rule is still active and processing data correctly
Zero alerts may indicate the control is working, but could also mean the monitoring rule has failed or stopped receiving data — the rule itself must be validated.
Question 4: Which of the following BEST describes a 'control self-assessment' integrated with continuous monitoring?
- External auditors independently verifying all transactions
- Management periodically evaluating the effectiveness of their own controls using monitoring data (Correct answer)
- Automated systems replacing all human judgment
- Annual compliance questionnaires submitted to regulators
Correct answer: Management periodically evaluating the effectiveness of their own controls using monitoring data
Control self-assessment uses monitoring output to help management identify control gaps and evaluate effectiveness on an ongoing basis.
Question 5: When implementing a continuous auditing program, which challenge is MOST commonly cited by organizations?
- Lack of sufficient transaction volume to analyze
- Data quality issues including incomplete, inconsistent, or inaccessible data (Correct answer)
- Auditors refusing to use technology tools
- Regulatory prohibitions on automated testing
Correct answer: Data quality issues including incomplete, inconsistent, or inaccessible data
Poor data quality — missing fields, inconsistent formats, or restricted access — is the most frequently reported barrier to continuous auditing implementation.
Question 6: A continuous auditing dashboard shows a sudden spike in journal entries posted after business hours. This pattern MOST suggests:
- Normal end-of-month accrual activity
- A potential fraud indicator requiring further investigation (Correct answer)
- An improvement in employee productivity
- A system clock error in the ERP
Correct answer: A potential fraud indicator requiring further investigation
After-hours journal entries are a classic fraud red flag identified in the ACFE Fraud Examiners Manual and warrant immediate audit follow-up.
ADA Continuous Auditing and Monitoring 2
Which metric best measures the effectiveness of a continuous monitoring program over time?