ADA Continuous Auditing and Monitoring 1 — Questions and Answers
Question 1: What is the primary distinction between continuous auditing and continuous monitoring in an organization?
- Continuous auditing is performed by management; continuous monitoring is performed by auditors
- Continuous auditing is performed by internal auditors; continuous monitoring is performed by management (Correct answer)
- Continuous auditing uses manual tests; continuous monitoring uses automated alerts
- There is no practical difference between the two
Correct answer: Continuous auditing is performed by internal auditors; continuous monitoring is performed by management
Continuous auditing is an independent assurance activity conducted by auditors, while continuous monitoring is a management control activity.
Question 2: Which technology infrastructure component is most essential for enabling continuous auditing of financial transactions?
- Manual reconciliation spreadsheets
- Real-time or near-real-time access to ERP transaction data (Correct answer)
- Annual batch export of general ledger data
- Paper-based audit trails
Correct answer: Real-time or near-real-time access to ERP transaction data
Continuous auditing depends on timely data access, requiring direct connectivity to ERP or transactional systems for near-real-time analysis.
Question 3: In a continuous auditing environment, exception reports are BEST used to:
- Replace the need for manual testing entirely
- Direct auditor attention to transactions that deviate from defined rules or thresholds (Correct answer)
- Confirm that all transactions comply with policy
- Satisfy external financial statement audit requirements
Correct answer: Direct auditor attention to transactions that deviate from defined rules or thresholds
Exception reports surface anomalies that exceed tolerance thresholds, allowing auditors to focus limited resources on high-risk items.
Question 4: A key performance indicator (KPI) used in continuous monitoring detects that purchase order approval cycle times have tripled. This MOST LIKELY signals:
- Improved internal controls
- A potential bottleneck, bypass, or control breakdown in the approval process (Correct answer)
- That the vendor master is outdated
- Normal seasonal fluctuation with no action needed
Correct answer: A potential bottleneck, bypass, or control breakdown in the approval process
A sudden increase in cycle times often indicates a process disruption, control circumvention, or systemic issue requiring investigation.
Question 5: Which of the following is an example of a rule-based alert in a continuous auditing system?
- A regression model predicting future revenue
- Flagging any invoice approved by the same employee who created it (Correct answer)
- Clustering vendors by geographic region
- Generating a trend line for monthly expenses
Correct answer: Flagging any invoice approved by the same employee who created it
Rule-based alerts trigger when specific predefined conditions are met, such as a segregation-of-duties violation where one person both creates and approves.
Question 6: The AICPA/CICA framework for continuous auditing recommends that audit modules embedded in ERP systems should:
- Modify source transactions to correct errors automatically
- Operate transparently without affecting transaction processing performance (Correct answer)
- Replace periodic financial audits entirely
- Be visible and accessible to end users for self-review
Correct answer: Operate transparently without affecting transaction processing performance
Embedded audit modules must be non-intrusive, running in the background without degrading system performance or altering transactions.
ADA Continuous Auditing and Monitoring 1
What is the primary distinction between continuous auditing and continuous monitoring in an organization?