3. Should external auditors test internal controls on all audit engagements? How might the extent of controls testing performed by the OSC following adoption of the reform programs have differed from that of a CPA firm? How could substantive testing of account balances and analytical procedures using benchmarks or budgets have helped detect the fraud? 4. Technology impacts both client controls and how auditors document audit testing. a. Should auditors be required to test the flow of transactions