1. A five-step approach can be used to identify deficiencies, significant deficiencies, and material weaknesses. The last step in this approach is:

   1. identify the absence of key controls.

   2. consider the possibility of compensating controls.

   3. determine potential misstatements that could result.

   4. identify existing controls.