1.What are the consequences of identifying too many or too few key process-level risks in performing an assurance audit?

2. What are some of the considerations when evaluating the design adequacy of controls for a business process?

At least a paragraph answer required.