hardMultiple Choice
Continuous Auditing vs Periodic: Primary Benefit CISA
An IS auditor is evaluating the use of continuous auditing techniques. Which of the following is the most significant benefit of implementing continuous monitoring over traditional periodic audits?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Timely detection of control deficiencies
Continuous monitoring provides timely detection of control deficiencies, enabling faster remediation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Reduced need for substantive testing
Why it's wrong here
Continuous monitoring does not remove the need for substantive testing; it shifts testing toward automated, population-wide checks while substantive procedures remain for areas automation cannot cover. It is tempting because automation reduces manual effort, but the benefit is earlier detection, not elimination of testing.
- ✗
Elimination of control risk assessments
Why it's wrong here
Control risk assessments are a required audit judgement and cannot be eliminated; continuous monitoring supplies evidence for them but does not replace the assessment. It is tempting because automation reduces manual testing effort, yet the benefit is timely exception detection, not removal of risk evaluation.
- ✗
Automated generation of audit reports
Why it's wrong here
Continuous monitoring's value lies in detecting control failures as transactions occur, enabling timely intervention; scheduled report generation merely automates output that periodic audits already produce. Automated reporting suits management dashboards or routine compliance evidence collection, but it does not shorten the detection gap that defines continuous auditing's advantage.
- ✓
Timely detection of control deficiencies
Why this is correct
Continuous monitoring evaluates controls at frequent intervals against live data, so deviations are flagged as they emerge rather than at the next scheduled audit. This delivers timely detection of control deficiencies, directly satisfying the stem's demand for the most significant benefit over traditional periodic audits.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.