CSQM Monitoring Requirements: A Practical Guide for CPA Firms
Monitoring is one of the most important parts of a firm’s quality management system under CSQM 1. It is also one of the areas where small firms often struggle most. Many firms perform monitoring activities throughout the year, but do not document them clearly or connect them back to their quality risks and objectives.
That creates a problem during practice inspections. If monitoring cannot be demonstrated, inspectors may conclude that it did not occur.
This guide explains what monitoring means under CSQM 1, how it fits into the firm’s overall quality management process, and what kinds of evidence firms should maintain to support their annual evaluation and inspection readiness.
👉 Why This Matters for Your Firm
Many firms believe they are monitoring quality, but their documentation does not clearly show what was done, what was found, or how deficiencies were addressed. That gap often becomes a problem in practice inspections.
What Monitoring Means Under CSQM 1
Monitoring is the process used by a firm to evaluate whether its system of quality management is operating effectively.
A quality management system includes policies and procedures designed to address quality risks.
Monitoring evaluates whether those policies and procedures are:
- Being followed in practice
- Achieving the intended results
- Operating consistently across the firm
In simple terms, monitoring asks: Are the firm’s quality policies actually working?
Firms looking for a more structured way to manage monitoring may also want to review our quality management software for CPA firms.
How Monitoring Fits Into the Quality Management Process
Monitoring is part of a broader cycle within a quality management system. The process typically works as follows:
- Identify quality risks
- Design policies and procedures to address those risks
- Perform monitoring activities
- Identify findings or deficiencies
- Implement remediation
Monitoring therefore acts as a feedback mechanism that helps firms continuously improve their system of quality management.
👉 Common Issue in Practice Inspections
Many firms perform monitoring but fail to document it. Without evidence, inspectors assume it did not occur.
Examples of Monitoring Activities
Monitoring activities should be tailored to the firm’s specific risks and services.
Examples of monitoring activities include:
Engagement File Reviews
A partner or quality leader may review completed engagement files to assess compliance with professional standards and firm policies.
These reviews may evaluate:
- Documentation quality
- Compliance with engagement acceptance procedures
- Independence considerations
Staff Interviews
Partners may periodically discuss firm policies and procedures with staff to determine whether policies are understood and applied consistently.
These discussions can reveal whether procedures are working as intended.
Independence Monitoring
Firms may review independence confirmations, financial interests, or other compliance records to ensure that independence policies are operating effectively.
Training Effectiveness
Monitoring may also involve evaluating whether training programs are addressing quality risks effectively.
For example, firms may review engagement files after training to determine whether improvements are visible.
Review of Complaints, Findings, and Other Information
Information obtained during the monitoring period, such as practice inspection results or correspondence from provincial bodies, may point to deficiencies in the firm’s quality management system and should be considered as part of the monitoring process.
How Monitoring Should Be Documented
One of the most common issues identified during practice inspections is the lack of monitoring documentation.
Even when firms perform monitoring activities, they often fail to maintain sufficient evidence that the activities occurred.
Effective monitoring documentation typically records:
- The monitoring activity performed
- The date it occurred
- The individual responsible
- The results of the activity
Documentation may include:
- Monitoring logs
- Engagement review forms
- Interview notes
- Summary reports
Monitoring documentation does not need to be complex. However, it must clearly demonstrate that monitoring activities actually occurred.
For example, a firm should be able to show what was reviewed, when it was reviewed, who performed the review, what was found, and what follow-up occurred.
Monitoring Provides the Evidence for the Annual QMS Evaluation
One area that many firms overlook is the connection between monitoring and the annual evaluation of the system of quality management.
Under CSQM 1, firms are required to perform an annual evaluation to determine whether their system of quality management provides reasonable assurance that:
- The firm and its personnel fulfill their responsibilities under professional standards and applicable legal and regulatory requirements
- Engagement reports issued by the firm are appropriate in the circumstances
Monitoring activities performed throughout the year form the primary evidence used to support this evaluation.
For example, monitoring results may indicate:
- Whether engagement documentation consistently meets firm standards
- Whether independence procedures are functioning effectively
- Whether training programs are addressing identified risks
If monitoring activities identify deficiencies, those deficiencies must be evaluated and addressed through remediation.
Without documented monitoring activities, firms may struggle to support their conclusions in the annual evaluation.
Identifying Deficiencies and Remediation
When monitoring activities identify issues, firms must evaluate whether those issues represent deficiencies in the system of quality management.
This evaluation typically considers:
- The nature of the issue
- The potential root cause
- Whether the issue indicates a broader systemic problem
If a deficiency is identified, the firm must implement remediation actions designed to address the root cause and prevent recurrence.
Remediation actions may include:
- Updating policies or procedures
- Providing additional training
- Enhancing supervision or review processes
Common Monitoring Mistakes in Small Firms
Many firms encounter similar challenges when implementing monitoring processes.
Common issues include:
Monitoring Activities Not Linked to Risks
Monitoring activities must address specific risks identified in the firm’s quality management system.
Monitoring Is Performed but Not Documented
If monitoring activities are not documented, inspectors may conclude that monitoring did not occur.
Monitoring Is Treated as a Once-Per-Year Exercise
Monitoring should occur throughout the year rather than only during the annual evaluation.
Related: If you’re looking for a quick, practical summary, I’ve outlined 3 common monitoring mistakes I see in small firms here: 3 CSQM 1 Mistakes I See in Small Firms
Final Thoughts
Monitoring is a critical component of an effective quality management system.
While the concept may initially seem complex, monitoring ultimately serves a simple purpose: to help firms evaluate whether their quality management system is operating effectively and continuously improve it over time.
By designing appropriate monitoring activities, documenting the results, and linking those results to the annual evaluation, firms can strengthen their quality management systems and demonstrate compliance with CSQM 1.
About the Author
Jennifer O’Neal, CPA, CA is the founder of Tilaus.io and works with accounting firms across Canada and the United States on quality management systems, monitoring, and professional standards implementation.
Preparing for a practice inspection?
Tilaus helps CPA firms track monitoring activities, document follow-up, and maintain evidence to support their quality management system.