discuss the reasons behind the statement content, stating examples of both types of controls, and suggesting new ideas for improvement.

"The starting point for most auditors in the assessment of control risk is the assessment of entity-level controls. Auditors generally evaluate entity-level controls before evaluating transaction-level controls".