3.33
TECHNIQUES AND PROCEDURES OF AUDITING |
inquiries about, and observation of, internal controls, which leaves no audit trials, for example, deter-
mining who actually performs each function and not merely who are supposed to perform it,
re-performance of internal controls, for example, reconciliation of bank accounts, to ensure they were
correctly performed by the organisation, and
testing of internal control operating on specifi c computerised applications or over the overall informa-
tion technology function, for example, access or programme change controls.
The auditor should obtain audit evidence through tests of control to support any assessment of control
risk, which is less than high. The lower the assessment of control risk, ...