Continuous monitoring and audit aim at improving the efficiency of operations at the company, identifying and timely assessing risks for providing critical information to senior management for better decision-making processes. By adopting control tools embedded in company s information systems or by using specialized software, continuous monitoring and audit provide real-time assessment of business processes. This dissertation aims to develop and apply in a Brazilian power energy company a methodology for establishing and hierarchizing monitoring rules for the purpose of continuous monitoring and audit. The proposed methodology encompasses selection of business processes with greater exposure to risk; identification of risk events associated with those processes; and establishment of monitoring rules themselves. This research can be classified as applied, descriptive, methodological and participatory. Its methodological approach includes the development of a case study and workshops for collecting primary data. The main results can be summarized as follows: (i) critical review of existing literature on continuous audit; (ii) a methodology designed for establishing and hierarchizing monitoring rules with the purpose of continuous monitoring and audit at a Brazilian power energy company selected for this research; and (iii) demonstration of the applicability and effectiveness of the proposed methodology according to the results presents in the case study.