Consider the following two statements:

Evaluating the adequacy of control design is necessary but not sufficient if the objective of an assurance engagement is to reach a conclusion regarding the overall effectiveness of controls.

If an internal auditor determines that a control is inadequately designed, there is no good reason to test the effectiveness of the control.

Do you agree with each of these statements? Explain.