In preparing a report on internal control, the auditor is required to assess the process used by management in developing their report on internal control. Assume that the auditor did not find any material weaknesses in controls.

Required

a. The auditor did find that management's approach to assessing internal controls was deficient in that it (a) was not comprehensive and (b) did not contain sufficient sample sizes for testing controls. Management reports that controls over financial reporting were effective (same finding as the auditor). How does management's approach in its assessment of internal controls affect the auditor's opinion? Explain.

b. To what extent should the auditor and management collaborate in evaluating the design and effectiveness of internal controls over financial reporting? Explain.