DEFINITION
Continuous Controls Monitoring
Continuous controls monitoring is the automated testing of control operation against full transaction populations on an ongoing schedule, rather than through periodic sample-based review. Its defining benefit is timing: exceptions surface while they can still be corrected or recovered.
Traditional control testing confirms that a control existed and that a sample of transactions complied. It cannot detect a control that was overridden after configuration, or one that degraded gradually after a process change.
Continuous monitoring reports exception rates over time by process, entity, and approver, which makes control degradation visible before it becomes a failure. It also changes the economics of coverage, because the marginal cost of testing an additional scenario is low once the data is modelled.