AAB and Company is auditing a large publicly traded company. The audit of internal controls over financial reporting has been properly planned and the auditors have already identified controls to test using a top-down, risk-based approach. What is the next step? Give examples of procedures that may be completed in the next step in the audit.

Do not include the question with your response and use bullet points.