What are the implications to the conduct of an audit and the auditor's assessment of internal control over financial reporting if the auditor concludes that an orga- nization's control environment does not promote strong control conscientious- ness on the part of employees? Give an example in your answer.