1. Bottom-Up Approach
   1. What were the strengths and weaknesses of Trinitys practice-based bottom-up approach? How effective was it?
   2. What would you recommend it should have done differently in Year 1? Defend your response.
   3. Compare and contrast the strengths and weaknesses of a bottom-up versus a top-down risk approach to compliance.
   4. Which approach is more appropriate in completing a compliance project successfully for Trinitys first year?
   5. How does each approach affect a companys internal control structure?
   6. Identify the chief insights from the pilot project. How does the pilot project for the EDP system compare to SOX requirements?
   7. Identify the testing processes Trinity performed and whether Trinity took the appropriate approach in designing their controls.
   8. Based on the substantive tests, which testing process proved to be most useful in assessing Trinitys accounting system?
   9. Compose a short memorandum that communicates the results of the first year of testing along with recommendations as to what Trinity should do differently in subsequent years.