GAAS requires that auditors gain an understanding of a clients internal control system. How does the auditor incorporate this knowledge into the audit plan? Is an auditor required to test internal controls on every audit? Explain.