Which type of monitoring focuses on the input or entrance criteria to a business process, for compliance to organizational policies?

Preventive monitoring involves controls designed to avert problems before they arise. This type of monitoring is proactive and focuses on the inputs or entrance criteria of a process to ensure they meet predefined standards and comply with organizational policies. By verifying inputs at the point of entry, it prevents errors, non-compliance, or irregularities from being introduced into the business process. This directly aligns with the scenario of checking entrance criteria to enforce policy compliance.

B. Detective Monitoring: This type of monitoring is reactive; it is designed to find errors or issues after they have already occurred and entered the process.

C. Management Monitoring: This is a broad term for high-level oversight of all control systems, not a specific type of control focused on process inputs.

D. None of the above: This is incorrect as Preventive Monitoring is the precise term for the activity described in the question.

1. COSO Framework: The Committee of Sponsoring Organizations of the Treadway Commission (COSO) framework, a foundational model for internal controls, distinguishes between control types. Preventive controls are defined as those that prevent the occurrence of misstatements.

Source: COSO, "Internal Control – Integrated Framework: Executive Summary," May 2013, page 4. The document explains that control activities, such as verifications and authorizations, are established to ensure management directives are carried out. Checking entrance criteria is a form of verification.

2. University Courseware: Reputable university materials on internal controls and auditing consistently define these terms in line with the correct answer.

Source: University of California, Berkeley, Controller's Office, "Understanding Internal Controls - A Guide for Departments." This guide defines preventive controls as being "designed to discourage errors or irregularities from occurring" and lists "Approvals, authorizations, and verifications" as primary examples. This directly supports the concept of checking entrance criteria.

3. Academic Publications: Peer-reviewed literature on auditing and information systems reinforces this distinction.

Source: F.G.H. II, & R.A.S. Jr. (2006). Auditing and Assurance Services: An Integrated Approach. Pearson/Prentice Hall. Chapter 10 discusses the types of controls, defining preventive controls as those applied before processing to stop errors from occurring, contrasting them with detective controls that identify errors after processing.