After obtaining an understanding of an entity's internal control system and assessing control risk, an auditor may Perform tests of controls to verify management's assertions that are em- bodied in the financial statements. 6. Consider whether audit evidence matter is available to support a further t reduction in the assessed level of control risk.

c. Apply analytical procedures as substantive procedures to validate the assessed level of control risk.

d. Evaluate whether the internal controls detected material misstatements in the financial statements. P-985